Red Hat Bugzilla – Bug 770
"startinnfeed" binary can be run by any user!!
Last modified: 2008-05-01 11:37:48 EDT
The permisions on /usr/lib/news/startinnfeed are hazardous.
I suspect this binary isn't intended to be world-executable.
By removing world execute permission from this binary only
people in group news can run the "startinnfeed" task.
The problem with current permissions is that _any_ user
can ruin system performance by starting a new news feed
at a time of their choice.
Thank you for your suggestion and it has been noted. We will consider
it for any upcoming releases.