From a02728aa3414cdf6fd45375ae9670d8ba76ae6a1 Mon Sep 17 00:00:00 2001 From: dm <> Date: Tue, 27 Feb 1996 03:31:21 +0000 Subject: [PATCH] Identd ras as nobody.kmem. Changed it to root. Running anything as nobody.kmem allows any "nobody" process to get into the kmem group through ptrace(). Kmem is a privileged enough group that we might as well just run identd as root. --- src/etc/inetd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/etc/inetd.conf b/src/etc/inetd.conf index 50deca14..adb7ebb3 100644 --- a/src/etc/inetd.conf +++ b/src/etc/inetd.conf @@ -10,7 +10,7 @@ login stream tcp nowait root /usr/libexec/rlogind rlogind #exec stream tcp nowait root /usr/libexec/rexecd rexecd #uucpd stream tcp nowait root /usr/libexec/uucpd uucpd finger stream tcp nowait nobody /usr/libexec/fingerd fingerd -ident stream tcp wait nobody.kmem /usr/libexec/identd identd -w -t60 -l -o -e -N +ident stream tcp wait root /usr/libexec/identd identd -w -t60 -l -o -e -N tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot comsat dgram udp wait root /usr/libexec/comsat comsat ntalk dgram udp wait root /usr/libexec/ntalkd ntalkd