From: Amos Shapira (amoss@picton.cs.huji.ac.il)
Date: 08/01/93


Subject: Re: rsh: "rcmd: socket: Permission denied"
From: amoss@picton.cs.huji.ac.il (Amos Shapira)
Date: 1 Aug 1993 10:27:41

niemidc@oasis.gtefsd.com (David C. Niemi) writes:

   (Brian McCauley) writes:
>(James Jurach) writes:
>> |> ~ % rsh loopback
>> |> rcmd: socket: Permission denied
>
>rsh should be installed setuid(root)

   This will make things work, but it is a security hole big enough to fly a
   747 through, just in case you care.

Eh? Why? rsh is supposed to be suid-root on any Unix just so it can bind
to a port lower than 1024 and so be "trust-worthy" (well, you can argue with
that :) by other UNIX systems. That's the way it is installed on all our
workstations (Suns, Indigo's, DrekStations etc...).

Cheers,

--Amos