Date: Sat, 28 Jul 2001 12:55:12 +0100 From: Brian Somers <brian@Awfulhak.org> To: Kris Kennaway <kris@obsecurity.org> Cc: Brian Somers <brian@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@Awfulhak.org Subject: Re: cvs commit: src/usr.sbin/ppp Makefile Message-ID: <200107281155.f6SBtCc28906@hak.lan.Awfulhak.org> In-Reply-To: Message from Kris Kennaway <kris@obsecurity.org> of "Sat, 28 Jul 2001 04:47:03 PDT." <20010728044659.B66608@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> On Sat, Jul 28, 2001 at 04:34:17AM -0700, Brian Somers wrote:
> > brian 2001/07/28 04:34:17 PDT
> >=20
> > Modified files: (Branch: RELENG_4)
> > usr.sbin/ppp Makefile=20
> > Log:
> > MFC: Use 4551/551 permissions rather than 4554/554
>
> As I emailed you earlier in the week in relation to pppd, this
> substantially changes the file permissions: now every user can run it
> with root permissions (before they needed to be in the group). Given
> the trade-off between this and the NFS case, I think 4550/4554 is the
> better option.
Sorry - I assumed the previous email was an observation...
With ppp, we're reasonably safe in that an ``allow user'' command
must be present in the config to let people use ppp.
However, I understand your concern. There may be people out there
with configurations that say ``allow user *'' on the basis that
they're protected by the ``network'' group permissions.
I'll revert the change.
> Kris
--
Brian <brian@freebsd-services.com> <brian@Awfulhak.org>
http://www.freebsd-services.com/ <brian@[uk.]FreeBSD.org>
Don't _EVER_ lose your sense of humour ! <brian@[uk.]OpenBSD.org>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200107281155.f6SBtCc28906>