http://packetstormsecurity.org/UNIX/admin/xscreensaver-3.34.tar.gz

[xscreensaver] / hacks / sonar.man

diff --git a/hacks/sonar.man b/hacks/sonar.man
index 1db5982abd20a6bf760a5f3e1a1f1214621119ce..4a4b3bb28a61839550cb7aeb26e00aea5f2adf1a 100644 (file)
--- a/hacks/sonar.man
+++ b/hacks/sonar.man
@@ -160,7 +160,15 @@ See option \-teamACount, above.  Default value is 4.
 See option \-teamBCount, above.  Default value is 4.
 .SH NOTES
 In order to use the ping sensor, this program must be installed as 
-setuid root, so that it can create an ICMP socket.
+setuid root, so that it can create an ICMP socket.  Root privileges
+are disavowed shortly after startup (just after connecting to the
+X server and reading the resource database) so this is \fIbelieved\fP
+to be a safe thing to do, but it is usually recommended that you 
+have as few setuid programs around as possible, on general principles.
+.EX
+chown root.root sonar
+chmod u+s sonar
+.EE
 .SH SEE ALSO
 .BR X (1),
 .BR xscreensaver (1),