Subj : This is why FreeBSD...
To   : Takumi
From : Pascal Schmidt
Date : Sun Aug 22 2004 08:32 pm

Hi Takumi! :-)

 T> And the obvious security flaw is that a person could write a shell (or 
 T> a program that executes a shell), set the setuid flag, and make someone 
 T> else the owner.  Guess what, you now have a shell that gives you all the 
 T> rights of that user.
That's one problem, and solved in some Unix system by removing the setuid
and setgid bits during a chown(2) operation.

Ciao
Pascal

--- Msged/LNX 6.1.1
 * Origin: The labour we delight in physics pain. (1:153/401.2)

.