[linux-security] Re: Programming ....

[Dave <dgriffi cs csubak edu>]

On Fri, 26 Nov 1999, Arni Raghu wrote:

> Hi,
> I am building my own TCP daemon for easing some routine admin stuff... I am
> no expert on security,. I would really appreciate it if someone sent me some
> pointers to writing TCP daemons that are hacker-proof( i know there is
> nothing like that...but I do not want to be making mistakes in coding that
> are well known.. ;)
> 
> The daemon runs as root....so that is why I am woried....

You need to ask yourself "does this thing really need to run as root?" and
"how can I do this without running as root or using suid or sgid bits?"

-- 
David Griffith
dgriffi cs csubak edu