Why is KPPP installed with the setuid bit on?
para>There is no need for the setuid bit, if you know a bit of UNIX systems administration. Simply create a modem group, add all users that you want to give access to the modem to that group and make the modem device read/writable for that group. Also if you want DNS configuration to work with KPPP, then /etc/resolv.conf must be read/writable by the members of that group. The same counts for /etc/ppp/pap-secrets and /etc/ppp/chap-secrets if you want to use the built-in PAP or CHAP support, respectively. The KPPP team has lately done a lot of work to make KPPP setuid-safe. But it’s up to you to decide if you install and how you install it. You might also want to read the Security section.
