From owner-freebsd-security@FreeBSD.ORG Tue May 27 13:10:11 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E77BF37B401 for ; Tue, 27 May 2003 13:10:11 -0700 (PDT) Received: from pan.gwi.net (pan.gwi.net [207.5.128.165]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3B3F943F93 for ; Tue, 27 May 2003 13:10:11 -0700 (PDT) (envelope-from ah60@httpsite.com) Received: from andy.gwi.net (blake.gwi.net [207.5.142.8]) by pan.gwi.net (8.12.6p2/8.12.6) with ESMTP id h4RKAAEL019587 for ; Tue, 27 May 2003 16:10:10 -0400 (EDT) (envelope-from ah60@httpsite.com) Message-ID: X-Mailer: XFMail 1.5.4 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <200305271238.27152.metrol@metrol.net> X-System-Info-OS: FreeBSD 4.8-STABLE #0 X-System-Info-httpd: apache-1.3.27 X-System-Info-WM: windowmaker-0.80.2 X-System-Info-RT: rt-3-0-2 X-System-Info-DB: PostgreSQL-7.3.2 X-System-Info-Perl: v5.8.0 X-Homepage: http://www.nachoz.com X-PGP-Key: RSA-1024 http://www.nachoz.com/andy.pub Date: Tue, 27 May 2003 16:10:25 -0400 (EDT) Sender: aharriso@andy.gwi.net From: Andy Harrison To: FreeBSD Security Subject: Re: multihost master.passwd sync X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2003 20:10:12 -0000 -----BEGIN PGP SIGNED MESSAGE----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ On 27-May-2003, Michael Collette wrote message "Re: multihost master.passwd sync" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > That's not what Eric was suggesting. You use a non-root user account to do > the xfer. You then have a root owned cron job that puts the xfer'd file in > place. > > Root never moves anything across the network. yes, understood. that's what I said in my 2nd post in the thread, actually. ~~ Andy Harrison ah##@httpsite.com ICQ: 123472 AIM/Y!: AHinMaine [full headers for details] -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQCVAwUBPtPGMFPEkLgodAWVAQHPSwQAuiUA/LX8328ThdZDBJFP9caRJjCw9KT9 krta1egpIHOXy5p8OYVp30YIDrwLwNsi1qV/9Z6LjW5ct+WJdS0DLWu/0UcvztOJ dkpcVXHVHAzQ8ta3/C125dZpxDDo40iK5zyW6VkIuCKsHNUv1TCTHdeIqJOnUyMr j/PT30KH08I= =6GYh -----END PGP SIGNATURE-----