*BSD News Article 89487


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!lucy.swin.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!news.ececs.uc.edu!news.kei.com!news.mathworks.com!news.maxwell.syr.edu!news.nacamar.de!news.bln.de!mind.de!nostromo.in-berlin.de!ripley
From: ripley@nostromo.in-berlin.de (H. Eckert)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: I hosed Netscape!  Argh
Date: 15 Feb 1997 19:38:05 GMT
Organization: Private access site (FreeBSD 2.1-R), Berlin, Germany, Europe
Lines: 40
Message-ID: <slrn5gc44t.6nr.ripley@nortobor.nostromo.in-berlin.de>
References: <5e1uq1$dgs@fridge-nf0.shore.net>
NNTP-Posting-Host: nortobor.nostromo.in-berlin.de
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Newsreader: slrn (0.8.8.2 UNIX)
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:35672

nvp@shore.net (Nathan V. Patwardhan):
> I know it was mentioned that Netscape should *not* be run as root,
> and the effects of doing so, but I can't find the original posting.

I haven't heard that until now but I consider netscape too dangerous
to be run from root anyway.

> I promise to be a good kid and not run Netscape as root anymore
> (even by accident).  :-)

This will probably help: 

====8<==== /usr/local/bin/netscape ====8<====
#!/bin/sh
#
# security enhancement by ripley, 1997-02-15
# An article in the freebsd newsgroups suggested running netscape as user
# root is far more dangerous than simply opening security holes.
#
if [ "`/usr/bin/id -u`" = "0" ]
then
	echo Never, ever run $0 as user root.
	exit 1
fi
#
export XKEYSYMDB ; XKEYSYMDB=/usr/X11R6/lib/X11/XKeysymDB
export XNLSPATH  ; XNLSPATH=/usr/X11R6/lib/X11/nls
export XAPPLRESDIR ; XAPPLRESDIR=/usr/X11R6/lib/X11/app-defaults
export CLASSPATH ; CLASSPATH=.:/usr/local/lib/netscape
exec /usr/local/lib/netscape/netscape.bin $*
====8<====

Greetings,
				Ripley
-- 
H. Eckert, 10777 Berlin, Germany
ISO 8859-1: Ä=Ae, Ö=Oe, Ü=Ue, ä=ae, ö=oe, ü=ue, ß=sz.
"(Technobabbel)" (Jetrel) - "Müssen wir uns diesen Schwachsinn wirklich
anhören?" (Neelix)