Browse Source

Identd ras as nobody.kmem. Changed it to root.

Running anything as nobody.kmem allows any "nobody" process to get into
the kmem group through ptrace().  Kmem is a privileged enough group that
we might as well just run identd as root.
OPENBSD_2_0
dm 28 years ago
parent
commit
a02728aa34
1 changed files with 1 additions and 1 deletions
  1. +1
    -1
      src/etc/inetd.conf

+ 1
- 1
src/etc/inetd.conf View File

@ -10,7 +10,7 @@ login stream tcp nowait root /usr/libexec/rlogind rlogind
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
ident stream tcp wait nobody.kmem /usr/libexec/identd identd -w -t60 -l -o -e -N
ident stream tcp wait root /usr/libexec/identd identd -w -t60 -l -o -e -N
tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot
comsat dgram udp wait root /usr/libexec/comsat comsat
ntalk dgram udp wait root /usr/libexec/ntalkd ntalkd


Loading…
Cancel
Save