Re: PCP exploit: pmpost - another nice symlink follower

[Jan-Frode Myklebust <janfrode@xxxxxxxxxxxxxxx>]

On Tue, Jun 19, 2001 at 08:17:03AM +0200, Michal Kara wrote:
>   I guess this is of a high importance for people on this list... If you don't
> need pmpost suided, just remove the suid bit and it'll be fine.
> 

I just verified this on IRIX (not the opensource
pcp), which also is vulnerable. Could somebody at 
sgi tell us the consequence of removing the suid 
bit here?


  -jf