The MUF interpreter does not process M1 programs as
SETUID, contrary to "man mucker levels". How to reproduce:
1. Create a M1 program that does any operation that
would only work if the program was SETUID.
3. Set the program SETUID.
4. Run the program. It will then behave as SETUID, as
normal.
5. Unset the SETUID bit.
6. Run the program. According to the docs, it _should_
behave as SETUID because of the M1, but dosen't.
(Note: Also test the program using characters other
then the owner.)
This has a security implication, because a M1 program
could run with an effective UID other then the owner.
-- Scribbles (will not give email, contact character on
FurryMUCK)
Logged In: YES
user_id=175712
Cannot reproduce in CVS. Which version is this?