DM(8) 386BSD System Manager's Manual DM(8) NNAAMMEE ddmm - dungeon master SSYYNNOOPPSSIISS llnn --ss ddmm _g_a_m_e DDEESSCCRRIIPPTTIIOONN DDmm is a program used to regulate game playing. DDmm expects to be invoked with the name of a game that a user wishes to play. This is done by cre- ating symbolic links to ddmm, in the directory /_u_s_r/_g_a_m_e_s for all of the regulated games. The actual binaries for these games should be placed in a ``hidden'' directory, /_u_s_r/_g_a_m_e_s/_h_i_d_e, that may only be accessed by the ddmm program. DDmm determines if the requested game is available and, if so, runs it. The file /_e_t_c/_d_m._c_o_n_f controls the conditions under which games may be run. The file /_e_t_c/_n_o_g_a_m_e_s may be used to ``turn off'' game playing. If the file exists, no game playing is allowed; the contents of the file will be displayed to any user requesting a game. FFIILLEESS /etc/dm.conf configuration file /etc/nogames turns off game playing /usr/games/hide directory of ``real'' binaries /var/log/games.log game logging file SSEEEE AALLSSOO dm.conf(5) BBUUGGSS Two problems result from ddmm running the games setuid ``games''. First, all games that allow users to run UNIX commands should carefully set both the real and effective user id's immediately before executing those com- mands. Probably more important is that ddmm never be setuid anything but ``games'' so that compromising a game will result only in the user's ability to play games at will. Secondly, games which previously had no reason to run setuid and which accessed user files may have to be modi- fied. HHIISSTTOORRYY The ddmm command appeared in 4.3BSD-Tahoe. BSD Experimental July 23, 1991 2