Date: Tue, 15 Jun 1999 13:20:13 -0400 (EDT) From: Barrett Richardson <barrett@phoenix.aye.net> To: Juergen Nickelsen <ni@tellique.de> Cc: David Shaw <dshaw@jabberwocky.com>, freebsd-security@FreeBSD.ORG Subject: Re: reading files. Message-ID: <Pine.BSF.4.01.9906151314130.8046-100000@phoenix.aye.net> In-Reply-To: <37666E9A.33FB34F9@tellique.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 15 Jun 1999, Juergen Nickelsen wrote: > David Shaw wrote on freebsd-security: > > > It's true that the NT Administrator can't read files that he doesn't > > have permission for, but since Administrator controls the ACLs, if he > > can't read something, he can trivially just change the permissions and > > give himself access! > > He can't without taking over the ownership of the file, i. e. he can, > but the original owner can tell afterwards. > Out of curiosity, can the owner's files be backed up via tape or some other means? If so, couldn't an admin achieve the same access via an API or some other mechanism? -- Barrett Richardson barrett@phoenix.aye.net > Greetings, Juergen. > > -- > Juergen Nickelsen <ni@tellique.de> > Tellique Kommunikationstechnik GmbH > Gustav-Meyer-Allee 25, 13355 Berlin, Germany > Tel. +49 30 46307-552 / Fax +49 30 46307-579 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.01.9906151314130.8046-100000>