Floppy filesystem security (was Re: interesting feature on AMIX..)

[Peter da Silva]

In article <1991Jun27.150353.21674 at convex.com> swarren at convex.com (Steve Warren) writes:
> So it seems to me that in a university environment where you are using the
> floppy filesystem as the working directory for your students, you don't really
> want to disable setuid completely, because they will need to use this feature
> occassionally while learning how Unix works.

I hope to hell you don't plan on executing stuff off the mounted floppy: just
copy it to the hard disk and then run it! When you do that, you can just chmod
the critical programs setuid after copying them.

That is, have an "install" script:

	cpio -pv /mnt /var/tmp
	chmod 4711 /var/tmp/driver /var/tmp/daemon /var/tmp/server
-- 
Peter da Silva; Ferranti International Controls Corporation; +1 713 274 5180;
Sugar Land, TX  77487-5012;         `-_-' "Have you hugged your wolf, today?"