On Thu, Mar 16, 2000 at 09:39:41PM +0100, Marco d'Itri wrote: > On Mar 16, Michael Stone <mstone@debian.org> wrote: > >Which is a waste of effort if the user can create a sgid shell. > Do you really mount user-writeable directories without the "nosuid" > option? 1. Depends on the environment. Unfortunately, nosuid isn't guaranteed to work in all cases (e.g., sperl). 2. The point was that the "auto group" function isn't a magic bullet and needs to be evaluated in context. In some cases it might make more sense to have a world-writable audio device than to play games with groups. -- Mike Stone
Attachment:
pgp61UlDPKJ0M.pgp
Description: PGP signature