This is Stripping-PrintManagers-setuid-bit in view mode; [Up]
Date: Sun 17-Nov-1989 19:41:16 From: Unknown Subject: Stripping PrintManager's setuid bit Hola, Recently, someone mentioned stripping setuid bits from applications so that ordinary users can't change things (like the machine time and date). I don't think changing PrintManager's setuid bit is enough to prevent someone from exporting/de-exporting a printer 'cause NetInfo relies on a directory's _writers property (this property specifying which users can modify the directory). The _writers property for the printer directory on my machines had one item: "*", which means ANYONE can modify the printer directory's contents. So, in addition to removing the setuid bit, you should also change the "*" entry to "root" (in all relevant NetInfo domains) to prevent everyone except root from modifying printer export information. __jayson adams :-) Academic Information Resources Stanford University surak@jessica.stanford.edu >From: swfc@mendelssohn.cs.columbia.edu (Shu-Wie F Chen)
These are the contents of the former NiCE NeXT User Group NeXTSTEP/OpenStep software archive, currently hosted by Marcel Waldvogel and Netfuture.ch.