Date: Thu, 6 Jan 2000 07:00:10 +0100 (CET) From: Oliver Fromme <olli@dorifer.heim3.tu-clausthal.de> To: freebsd-questions@FreeBSD.ORG Subject: Re: security Message-ID: <200001060600.HAA62415@dorifer.heim3.tu-clausthal.de> In-Reply-To: <8519jv$2fno$1@atlantis.rz.tu-clausthal.de>
next in thread | previous in thread | raw e-mail | index | archive | help
peter kok <aoypcc@hotmail.com> wrote in list.freebsd-questions:
> I found that I am as normal user runing on netscape messenger
> I can attach documents in "/"
> Are that no security?
You can attach any files that are world-readable.
Most system files are world-readable (for example /kernel)
because they don't contain any sensitive or critical data.
There are a few exceptions, such as files that contain
passwords -- these are not readable by everyone, of course.
For example, you can attach your /kernel to a mail message.
This is not a security problem in general, unless you have
reasons to hide your /kernel from your users.
> Why
> and how do i prevent normal user to do that?
You can change the permission flags of the files, if you
think that it is necessary and it doesn't have any negative
side-effects. You can use the chmod command for this, see
``man chmod'' for details.
Regards
Oliver
--
Oliver Fromme, Leibnizstr. 18/61, 38678 Clausthal, Germany
(Info: finger userinfo:olli@dorifer.heim3.tu-clausthal.de)
"In jedem Stück Kohle wartet ein Diamant auf seine Geburt"
(Terry Pratchett)
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001060600.HAA62415>