AM> Doesn't wash.  The entire chown command is useless if you can't
 AM> actually USE it.  Of you're worried about setuid/setgid then make chown
 AM> non-functional for files with setuid/setgid bits set.  Or to be really
 AM> strict, make it so you can only chown to your own userid (with read
 AM> perms on the other guys file(s), of course).

Yeah I have to agree here.  At the very least they could have made it
invisible to everybody but root.


... EXPERIENCE: recognizing a mistake when you make it again. 
--- MultiMail/Win32 v0.45
 þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net