Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Feb 1997 12:52:05 -0800
From:      "Jordan K. Hubbard" <jkh@time.cdrom.com>
To:        Dave Andersen <angio@aros.net>
Cc:        Alex Belits <abelits@phobos.illtel.denver.co.us>, hackers@freebsd.org
Subject:   Re: disallow setuid root shells? 
Message-ID:  <1489.856817525@time.cdrom.com>
In-Reply-To: Your message of "Mon, 24 Feb 1997 11:23:51 MST." <199702241823.LAA27302@fluffy.aros.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
>    I freely admit that most of these people will be using widely 
> published exploit code, and that almost any vigilant sysadmin won't
> be vulnerable to them -- but not everybody is anal about keeping their
> computer up to date and secure.  Forgive me for sounding political,
> but if even one or two computers are prevented from having a root
> compromise by this, it seems worthwhile - especially since nobody
> can think of anything it would actually hurt.

I sort of agree, if there's nothing it would break.  Most crackers
are stupid idiots who go from "cookbook" data which someone more
clued-in provided them with.  If it fails, they're hosed.

				Jordan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1489.856817525>