| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
-r-xr-xr-x root wheel fb_inet_server
-r-sr-x--- root firebird fb_lock_mgr
-r-x------ root wheel gds_drop
1. fb_inet_server is installed as normal binary but still must be started
under "firebird" user (it must be specified in x?inetd.conf)
2. fb_lock_mgr is still suid-ed binary but can be started only by users
in "firebird" group - it affects usage of "gsec" and similar utilities
while using "embedded" (direct) database access mode.
3. gds_drop is installed as normal binary but can be started by "root" only
to prevent any improper/malicious usage.
Notes:
svn path=/head/; revision=177670
|
