*BSD News Article 52193


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!news.sprintlink.net!in2.uu.net!news.mathworks.com!tank.news.pipex.net!pipex!dispatch.news.demon.net!demon!palmer.demon.co.uk!palmer.demon.co.uk!not-for-mail
From: gary@palmer.demon.co.uk (Gary Palmer)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Bad crypt?
Date: 4 Oct 1995 20:45:15 +0100
Organization: none
Lines: 23
Message-ID: <44uo8b$404@palmer.demon.co.uk>
References: <kchan-0110951556250001@adagio.kcc.hawaii.edu> <44rj41$c76@uriah.heep.sax.de>
NNTP-Posting-Host: pc.my.org
X-NNTP-Posting-Host: palmer.demon.co.uk

In article <44rj41$c76@uriah.heep.sax.de>,
J Wunsch <j@uriah.heep.sax.de> wrote:
>I dunno what the hell MOO is, but only a process with euid == 0 can
>actually get passwords in FreeBSD.  So you have to make your MOO aware
>of being setuid root.  (Don't simply turn on the suid bit.  Unless the
>program is already designed to be suid-aware, you're most likely going
>to open security holes!)

It's the LambdaMOO server (MOO = Mud, Object Orientated) from Pavel
Curtis (sp?) at Xerox PARC.

I've got a copy of the server code locally, but haven't had a chance
to go digging yet as the imminent 2.1 release has be chasing more
important stuff...

I'll try to get to this soon.

Gary

-- 
FreeBSD Core Member
E-Mail: Gary@Palmer.Demon.co.uk, gpalmer@FreeBSD.org