Ethereal-users: Re: [Ethereal-users] Mandrake 7.2 and Ethereal User Privliges

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 7 Nov 2000 12:29:39 -0800
On Tue, Nov 07, 2000 at 12:54:17PM -0500, John LeMay wrote:
> chmod 4755 /*/ethereal
> chmod 4755 /*/tethereal

I seem to remember seeing, somewhere, a claim that it is not safe to
make GTK+ programs set-UID (or, at least, that GTK+ is not known to be
safe, so that there's a risk that it's not safe); I think it may have
been on one of the GTK+ mailing lists.

Ethereal is a GTK+ program.

Furthermore, we've not audited it to make sure it's safe to make
set-UID; you make it set-UID at your own risk.