Date: Fri, 22 Jun 2012 11:36:53 -0500 From: Mark Felder <feld@feld.me> To: freebsd-security@freebsd.org Subject: Re: / owned by bin causes sshd to complain bad ownership Message-ID: <op.wgbcfrwf34t2sn@tech304> In-Reply-To: <20120622155928.GA9983@DataIX.net> References: <201206221343.q5MDhmvS045187@fire.js.berklix.net> <20120622155928.GA9983@DataIX.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 22 Jun 2012 10:59:28 -0500, Jason Hellenthal <jhellenthal@dataix.net> wrote: > > Security principles are well laid out and have not changed in a long > time. Vering away from those principles will cause a LOT of > administrative overhead as most software out there can expect a sane > environment if / is root:wheel Well he claims that bin owned everything back in the day and I didn't touch a *nix system until long after the time he describes. I can't imagine the benefit or functionality of a system with bin owning everything.... if everything precious is owned by bin, and bin isn't a standard system user, someone would have to elevate to root to do anything nasty. In the current setup you'd have to elevate to root to do something nasty. I see no benefit in binaries or libraries being owned by bin.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?op.wgbcfrwf34t2sn>