K 10
svn:author
V 3
skv
K 8
svn:date
V 27
2006-11-20T16:51:15.000000Z
K 7
svn:log
V 635
Change permissions for formerly suid-ed binaries:

-r-xr-xr-x  root  wheel     fb_inet_server
-r-sr-x---  root  firebird  fb_lock_mgr
-r-x------  root  wheel     gds_drop

1. fb_inet_server is installed as normal binary but still must be started
   under "firebird" user (it must be specified in x?inetd.conf)

2. fb_lock_mgr is still suid-ed binary but can be started only by users
   in "firebird" group - it affects usage of "gsec" and similar utilities
   while using "embedded" (direct) database access mode.

3. gds_drop is installed as normal binary but can be started by "root" only
   to prevent any improper/malicious usage.

END