Annotation of 43BSDTahoe/man/man8/dm.8, revision 1.1.1.1

1.1       root        1: .\" Copyright (c) 1987 Regents of the University of California.
                      2: .\" All rights reserved.
                      3: .\"
                      4: .\" Redistribution and use in source and binary forms are permitted
                      5: .\" provided that the above copyright notice and this paragraph are
                      6: .\" duplicated in all such forms and that any documentation,
                      7: .\" advertising materials, and other materials related to such
                      8: .\" distribution and use acknowledge that the software was developed
                      9: .\" by the University of California, Berkeley.  The name of the
                     10: .\" University may not be used to endorse or promote products derived
                     11: .\" from this software without specific prior written permission.
                     12: .\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
                     13: .\" IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
                     14: .\" WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
                     15: .\"
                     16: .\"    @(#)dm.8        5.6 (Berkeley) 7/9/88
                     17: .\"
                     18: .TH DM 8 "July 9, 1988"
                     19: .UC 8
                     20: .SH NAME
                     21: dm \- dungeon master
                     22: .SH SYNOPSIS
                     23: .B ln -s dm game
                     24: .SH DESCRIPTION
                     25: \fIDm\fP is a program used to regulate game playing.  \fIDm\fP expects to
                     26: be invoked with the name of a game that a user wishes to play.  This is
                     27: done by creating symbolic links to \fIdm\fP, in \fI/usr/games\fP, for all
                     28: of the regulated games.  The actual binaries for these games should be
                     29: placed in a ``hidden'' directory, \fI/usr/games/hide\fP, that may only be
                     30: accessed by the \fIdm\fP program.  \fIDm\fP determines if the requested
                     31: game is available and, if so, runs it.  The file \fI/usr/games/dm.config\fP
                     32: controls the conditions under which games may be run.  For remotely mounted
                     33: file systems, a machine name may be appended to the config file name,
                     34: i.e. the machine ``rip.berkeley.edu'' will use the file \fIdm.config.rip\fP
                     35: if it is present, otherwise it will use \fIdm.config\fP.
                     36: .PP
                     37: The file \fI/usr/games/nogames\fP may be used to ``turn off'' game
                     38: playing.  If the file exists, no game playing is allowed; the contents
                     39: of the file will be displayed to any user requesting a game.
                     40: .SH FILES
                     41: .nf
                     42: .ta \w'/usr/games/dm.config 'u
                     43: /usr/games/dm.config   - configuration file
                     44: /usr/games/hide                - directory of ``real'' binaries
                     45: /usr/games/nogames     - turns off game playing
                     46: .SH SEE ALSO
                     47: dm.config(5)
                     48: .SH BUGS
                     49: Two problems result from \fIdm\fP running the games setuid ``games''.
                     50: First, all games that allow users to run UNIX commands should carefully
                     51: set both the real and effective user id's immediately before executing
                     52: those commands.  Probably more important is that \fIdm\fP never be setuid
                     53: anything but ``games'' so that compromising a game will result only in
                     54: the user's ability to play games at will.  Secondly, games which previously
                     55: had no reason to run setuid and which accessed user files may have to
                     56: be modified.

unix.superglobalmegacorp.com

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.