Re: crontab and sgid (was: nonsuid overflows... still at risk?)

[Rafal Wojtczuk <nergal () www avet com pl>]

On Fri, 8 Jun 2001, Olaf Kirch wrote:

> On Thu, Jun 07, 2001 at 03:43:19PM +0200, Tomasz Grabowski wrote:
> > I'am wondering if someone too saw sgid bit on the 'crontab' binary and can
> > tell us what is the reason of that situation?
>
> In fact, Solar has suggested a patch to crontab (I believe it was his
> idea, apologies if it was in fact someone else) that makes crontab
> setgid crontab rather than setuid root. So there are valid reasons for
> a setgid crontab.
>
> I'm not sure who's using this patch right now, though.
Owl (http://www.openwall.com/Owl) installs setgid crontab by default.

Save yourself,
Nergal