On Mon, May 25, 1998 at 11:39:09PM -0700, Steve Lamb wrote: > On Mon, 25 May 1998 23:37:46 -0700, Steve Lamb wrote: > > > Wouldn't it just be easier to set the executable to GUID games and have > >all the game files owned by games? That way there is no need to keep adding > >people as they start playing the game. Or am I missing some fundimental > >security problem with that? > > Blah, I mean SUID, not GUID, sorry.
Is the game's code secure? Using the games group and setgid executables means that if the game does have holes, all you can do is trash the score files for the various games. The same is true using setuid games, but also means you could interfere with other people's games if you could a setuid games shell etc. Basically the existing systems works just fine as far as I can see. Hamish -- Hamish Moffatt, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Latest Debian packages at ftp://ftp.rising.com.au/pub/hamish. PGP#EFA6B9D5 CCs of replies from mailing lists are welcome. http://hamish.home.ml.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
