perms of /dev/uhid0

Lowell Gilbert freebsd-security-local at be-well.ilk.org
Wed Nov 26 09:35:12 PST 2003


Mike Tancsa <mike at sentex.net> writes:

>          if (!(pwent = getpwnam("nobody")))
>          {
>                  fprintf(stderr, "There must be a user called nobody
> for this program to work!");
>                  exit(1);
>          }

It would be safer to create a different user specifically for this
purpose.  Otherwise, something else running as nobody might have
access to more privileges than it was intended for...


More information about the freebsd-security mailing list