From owner-freebsd-questions Wed Jan 5 22: 0:14 2000 Delivered-To: freebsd-questions@freebsd.org Received: from dorifer.heim3.tu-clausthal.de (dorifer.heim3.tu-clausthal.de [139.174.243.252]) by hub.freebsd.org (Postfix) with ESMTP id BBD1814ED1 for ; Wed, 5 Jan 2000 22:00:11 -0800 (PST) (envelope-from olli@dorifer.heim3.tu-clausthal.de) Received: (from olli@localhost) by dorifer.heim3.tu-clausthal.de (8.9.3/8.9.3) id HAA62415; Thu, 6 Jan 2000 07:00:10 +0100 (CET) (envelope-from olli) Date: Thu, 6 Jan 2000 07:00:10 +0100 (CET) Message-Id: <200001060600.HAA62415@dorifer.heim3.tu-clausthal.de> From: Oliver Fromme To: freebsd-questions@FreeBSD.ORG Subject: Re: security X-Newsgroups: list.freebsd-questions In-Reply-To: <8519jv$2fno$1@atlantis.rz.tu-clausthal.de> User-Agent: tin/1.4.1-19991201 ("Polish") (UNIX) (FreeBSD/3.4-19991219-STABLE (i386)) MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG peter kok wrote in list.freebsd-questions: > I found that I am as normal user runing on netscape messenger > I can attach documents in "/" > Are that no security? You can attach any files that are world-readable. Most system files are world-readable (for example /kernel) because they don't contain any sensitive or critical data. There are a few exceptions, such as files that contain passwords -- these are not readable by everyone, of course. For example, you can attach your /kernel to a mail message. This is not a security problem in general, unless you have reasons to hide your /kernel from your users. > Why > and how do i prevent normal user to do that? You can change the permission flags of the files, if you think that it is necessary and it doesn't have any negative side-effects. You can use the chmod command for this, see ``man chmod'' for details. Regards Oliver -- Oliver Fromme, Leibnizstr. 18/61, 38678 Clausthal, Germany (Info: finger userinfo:olli@dorifer.heim3.tu-clausthal.de) "In jedem Stück Kohle wartet ein Diamant auf seine Geburt" (Terry Pratchett) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message