A security hole

[Stephen J. Friedl]

In article <168 at ists>, mike at ists (Mike Clarkson) writes:
> In article <130 at heart-of-gold>, jc at heart-of-gold (John M Chambers x7780 1E342) writes:
> > ...  I wouldn't trust news run by root, and I
> > don't trust cron to correctly run things under other ids;  I've had too many
> > surprises there to believe that I can reliably control cron.
> 
> Use su in your crontab:
> 
> 	0 * * * * su news -c "rnews -U"

A reminder that 3B2/3B5 System V Release 2 and 3 have separate
crontabs for each user and they take care of doing the "su"
business for you.

-- 
Steve Friedl     V-Systems, Inc.     *Hi Mom*
friedl at vsi.com   {uunet,ihnp4}!vsi.com!friedl