Received: with ECARTIS (v1.0.0; list gopher); Sat, 30 Jun 2007 10:49:24 -0500 (CDT) Received: from floodgap.com ([66.159.214.137] ident=elvis) by glockenspiel.complete.org with esmtp (Exim 4.63) id 1I4fCN-0001Mf-5O for gopher@complete.org; Sat, 30 Jun 2007 10:49:24 -0500 Received: (from spectre@localhost) by floodgap.com (6.6.6.666.1/2007.01.03) id l5UFnNXb007766 for gopher@complete.org; Sat, 30 Jun 2007 08:49:23 -0700 From: Cameron Kaiser <spectre@floodgap.com> Message-Id: <200706301549.l5UFnNXb007766@floodgap.com> Subject: [gopher] Re: Bucktooth questions In-Reply-To: <20070630144818.GC6348@pongonova.net> from "brian@pongonova.net" at "Jun 30, 7 09:48:18 am" To: gopher@complete.org Date: Sat, 30 Jun 2007 08:49:23 -0700 (PDT) X-Mailer: ELM [version 2.4ME+ PL39 (25)] MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 8bit X-Spam-Status: No (score 0.0): AWL=0.007 X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Sat, 30 Jun 2007 10:49:24 -0500 X-archive-position: 1637 X-ecartis-version: Ecartis v1.0.0 Sender: gopher-bounce@complete.org Errors-to: gopher-bounce@complete.org X-original-sender: spectre@floodgap.com Precedence: bulk Reply-to: gopher@complete.org List-help: <mailto:ecartis@complete.org?Subject=help> List-unsubscribe: <mailto:gopher-request@complete.org?Subject=unsubscribe> List-software: Ecartis version 1.0.0 List-Id: Gopher <gopher.complete.org> X-List-ID: Gopher <gopher.complete.org> List-subscribe: <mailto:gopher-request@complete.org?Subject=subscribe> List-owner: <mailto:jgoerzen@complete.org> List-post: <mailto:gopher@complete.org> List-archive: <http://www.complete.org/mailinglists/archives/> X-list: gopher

> > understand is how you're running it taint since, frankly, I haven't tested > > it in that environment (obviously). If you're running it as www, unless > > you're running it under something other than inetd or xinetd, I'm not sure > > how it's getting invoked. How are you running it? > > Under xinetd, as mentioned previously. Stock install as per the > INSTALL instructions. buckd ownership, as installed: > > -rwxr-xr-x 1 root wheel 6931 30 Jun 10:16 buckd > > What buckd says it's running as: > RUID: 70 (www) > EUID: 70 (www) > RGID: 70 (www) > EGID: 0 (root)

That's interesting. Why, I wonder, does it has an egid of root? That would explain the tainting.

-- ------------------------------------ personal: http://www.cameronkaiser.com/ -- Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser@floodgap.com -- smit happens. --------------------------------------------------------------