|
On systems with SVR4 (``Unix-98'') ptys (Linux version 2.2 and later,
SVR4),
luit
should be run as the invoking user.
On systems without SVR4 (``Unix-98'') ptys (notably BSD variants),
running
luit
as an ordinary user will leave the tty world-writable; this is a
security hole, and luit will generate a warning (but still accept to
run). A possible solution is to make
luit
suid root;
luit
should drop privileges sufficiently early to make this safe. However,
the startup code has not been exhaustively audited, and the author
takes no responsibility for any resulting security issues.
Luit
will refuse to run if it is installed setuid and cannot safely drop
privileges.
|