utmp and friends

[Steve G]

>The problem is that setgid binaries have some environment variables
>like LD_LIBRARY_PATH and TMPDIR removed.

This is correct. Otherwise you could have a security risk.

>Unfortunately I can't fix it unless utempter is accessible without setgid. Do 
>we really need to protect the file from bad applications?

Yes we must restrict access of that file.

-Steve


       
____________________________________________________________________________________
Choose the right car based on your needs.  Check out Yahoo! Autos new Car Finder tool.
http://autos.yahoo.com/carfinder/