Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!lucy.swin.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!news.ececs.uc.edu!news.kei.com!news.mathworks.com!news.maxwell.syr.edu!news.nacamar.de!news.bln.de!mind.de!nostromo.in-berlin.de!ripley From: ripley@nostromo.in-berlin.de (H. Eckert) Newsgroups: comp.unix.bsd.freebsd.misc Subject: Re: I hosed Netscape! Argh Date: 15 Feb 1997 19:38:05 GMT Organization: Private access site (FreeBSD 2.1-R), Berlin, Germany, Europe Lines: 40 Message-ID: <slrn5gc44t.6nr.ripley@nortobor.nostromo.in-berlin.de> References: <5e1uq1$dgs@fridge-nf0.shore.net> NNTP-Posting-Host: nortobor.nostromo.in-berlin.de Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Newsreader: slrn (0.8.8.2 UNIX) Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:35672 nvp@shore.net (Nathan V. Patwardhan): > I know it was mentioned that Netscape should *not* be run as root, > and the effects of doing so, but I can't find the original posting. I haven't heard that until now but I consider netscape too dangerous to be run from root anyway. > I promise to be a good kid and not run Netscape as root anymore > (even by accident). :-) This will probably help: ====8<==== /usr/local/bin/netscape ====8<==== #!/bin/sh # # security enhancement by ripley, 1997-02-15 # An article in the freebsd newsgroups suggested running netscape as user # root is far more dangerous than simply opening security holes. # if [ "`/usr/bin/id -u`" = "0" ] then echo Never, ever run $0 as user root. exit 1 fi # export XKEYSYMDB ; XKEYSYMDB=/usr/X11R6/lib/X11/XKeysymDB export XNLSPATH ; XNLSPATH=/usr/X11R6/lib/X11/nls export XAPPLRESDIR ; XAPPLRESDIR=/usr/X11R6/lib/X11/app-defaults export CLASSPATH ; CLASSPATH=.:/usr/local/lib/netscape exec /usr/local/lib/netscape/netscape.bin $* ====8<==== Greetings, Ripley -- H. Eckert, 10777 Berlin, Germany ISO 8859-1: Ä=Ae, Ö=Oe, Ü=Ue, ä=ae, ö=oe, ü=ue, ß=sz. "(Technobabbel)" (Jetrel) - "Müssen wir uns diesen Schwachsinn wirklich anhören?" (Neelix)