>You might as why go through all this hassle. Well, if you run the mud as
>root (for all intents and purposes, god of the system), one could buffer
>overflow an addon you make to the mud and act as root on your box. This
>gives them the oportunity to delete your entire filesystem. This is a Bad
>Thing(TM). Rule of thumb: only do stuff that absolutely needs root as
>root.
If they buffer overflowed an addon, this would simply terminate the game,
and disconnect everyone connected to the game, wouldn't it? Thus not letting
anyone be logged in to your machine as root. Still, it's a very bad idea to
run your MUD under the root user.
---
Andrew Ritchie,
object@alphalink.com.au.
+------------------------------------------------------------+
| Ensure that you have read the CircleMUD Mailing List FAQ: |
| http://qsilver.queensu.ca/~fletchra/Circle/list-faq.html |
+------------------------------------------------------------+
This archive was generated by hypermail 2b30 : 12/15/00 PST