From owner-freebsd-security@FreeBSD.ORG Fri Aug 27 14:27:08 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4ADF110656A8 for ; Fri, 27 Aug 2010 14:27:08 +0000 (UTC) (envelope-from leccine@gmail.com) Received: from mail-pv0-f182.google.com (mail-pv0-f182.google.com [74.125.83.182]) by mx1.freebsd.org (Postfix) with ESMTP id 1B6328FC1F for ; Fri, 27 Aug 2010 14:27:07 +0000 (UTC) Received: by pvg4 with SMTP id 4so1268530pvg.13 for ; Fri, 27 Aug 2010 07:27:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=shAv/ILG1qlAu37oqdGIz/YAYSBry60DcNAIh9j/Oy0=; b=cdlsLrcS7iYDr2ytt1cR+fji5s6aD4gXaZf/yHjKgcYhgAPJSLDu2G2e1o+WwprAmn JngdN0AS6JmizbhN/v27YbmUJVyRkv9y8mI0wgqLe/pZEQgVpdf68aZE3Pc/StOIxW4j 3YeCB+OPDE202yRn5Oc0lmYk4oSE0e0xsPBVo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=QoXVY3neMMJ1A2Din2mhS4av/kaQWRAbrXlnnHHDtRMTUnYd2gvPNqDb/Vz+rnFJMk R3sGyGP2/IVLNiwePIqGEY+4JJaA4OHcBQAd2f+oLWdHYa3jtUqcTsV11vH4ZVnzoAia ulQCWzYJV7MHXRq3vrUzQr1O1C9S7aTVgRYRs= MIME-Version: 1.0 Received: by 10.142.147.7 with SMTP id u7mr1218264wfd.218.1282919227391; Fri, 27 Aug 2010 07:27:07 -0700 (PDT) Received: by 10.231.36.74 with HTTP; Fri, 27 Aug 2010 07:27:07 -0700 (PDT) In-Reply-To: <5d88fc9506514cabc7390e66a1f9872f@localhost> References: <4C77A267.10102@thelostparadise.com> <5d88fc9506514cabc7390e66a1f9872f@localhost> Date: Fri, 27 Aug 2010 15:27:07 +0100 Message-ID: From: =?UTF-8?Q?Istv=C3=A1n?= To: Marian Hettwer Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: vadim_nuclight@mail.ru, freebsd-security@freebsd.org, Andy Kosela , Pieter de Boer Subject: Re: tcpdump -z X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2010 14:27:08 -0000 Well to be honest i don't see any case when i want to give sudo+tcpdump access to any user on my box. And those who are admins/roots anyway the "su -" just works perfectly and they can run tcpdump. IMHO I. On Fri, Aug 27, 2010 at 2:53 PM, Marian Hettwer wrote: > On Fri, 27 Aug 2010 15:02:43 +0200, Andy Kosela > wrote: > > > > > If you care about security I would definetly dump sudo(8) in the > > first place... > > > Why is that? I'd like to hear some good reasons why one should not use > sudo(8) if one's interested in security. > > Quite the opposite is true, imo. > > So... hej, do you have facts to backup that claim? I'd be really > interested! > > > ./Marian > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org > " > -- the sun shines for all http://l1xl1x.blogspot.com