From: Brandon S. Allbery (bsa@kf8nh.wariat.org)
Date: 04/07/93


From: bsa@kf8nh.wariat.org (Brandon S. Allbery)
Subject: Re: /bin/df does not have to be setuid root (at least for me)
Date: Thu, 8 Apr 1993 01:35:51 GMT

In article <1piblt$6n9@adv.win.tue.nl> devet@adv.win.tue.nl (Arjan de Vet) writes:
>In article <1pc444$rvj@nz12.rz.uni-karlsruhe.de> s_titz@ira.uka.de (Olaf
>Titz) writes:
>>The fix is to make /bin/df setuid root, which it *has* to be to work
>
>My /bin/df is not setuid root and my disk devices are not world readable and
>/bin/df works.

On mounted filesystems, df can use the statfs() system call. If df supports
checking free space on non-mounted filesystems and is used that way, it needs
sufficient permissions to read the disk device... but I'm not sure that option
should be granted to non-root anyway.

>PS: I also don't see why /bin/login is often world-executable and setuid
>root. I have my /bin/login not setuid root and only executable by root and

Berzerkers have the nasty habit of typing "login foo" to log out and
immediately log in as someone else. Linux is pandering to their perversion.
(...which should give you some idea of my opinion of that!)

++Brandon

-- 
Brandon S. Allbery                                       bsa@kf8nh.wariat.org

It's not too late to turn back from the "Gates" of Hell... Linux: the FREE 32-bit operating system, available NOW. Why waaaaaait for NT?