Re: Possible bufferoverflow condition in lpr, xterm and xload

[shipley () dis org (Evil Pete)]

> How about the real solution to the xterm woes:
>
> 1. Make utmp and wtmp owned by user root, group (say) acctg, and mode 664.
> 2. instead of setuiding xterm as root, make it setgid acctg.
>
> This way the worst consequence of hacking xterm would be compromise of
> accounting files, but not the root user.
>
> Is there anything else that xterm needs to do as root besides updating
> {w|u}tmp? I don't think so, I made a copy in mode 755 and it worked
> fine with -ut option.


chown your tty