From owner-freebsd-stable@FreeBSD.ORG Mon Dec 24 15:37:50 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 09A1BE4 for ; Mon, 24 Dec 2012 15:37:50 +0000 (UTC) (envelope-from lists@eitanadler.com) Received: from mail-la0-f51.google.com (mail-la0-f51.google.com [209.85.215.51]) by mx1.freebsd.org (Postfix) with ESMTP id 600718FC16 for ; Mon, 24 Dec 2012 15:37:48 +0000 (UTC) Received: by mail-la0-f51.google.com with SMTP id e4so8777469lag.38 for ; Mon, 24 Dec 2012 07:37:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eitanadler.com; s=0xdeadbeef; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=REusAg9V4odcfgo2zOr6Ybn36953GkOKNEVRtkcdRBo=; b=neEu0PTutDr5UVPqHyLRdNtfBdjjqxyxECqzPwK9nehRy+JTYRsEb/mqdj/AeukaT0 hou4DpwmBfT1wakoiYDXwCbHOVI+lmRsS+TO2TSMTMSRKCn5NBGsp12RdKatdOCTctUL imaXLqPiYAqmtCDS+t7JfifubFH0zujhTv/wE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=REusAg9V4odcfgo2zOr6Ybn36953GkOKNEVRtkcdRBo=; b=OTvu7C/t1Jmw1dF9Cc6XRpFgiWzGOyM6Sc5wKuzqTdYurluzxQRZjuBtUfLrIhTx3U FAbyCOpX2bwdimuPtpFS09J/czAYv+CTEOIequbw/bS5SqwYVNOO7aB+/HTSOralOD87 WukQHNeutLDKGkZsX5GMjaz0s032i5t58kApKExHmcoYQ1h90mYQ9Jzhizf5TFs+TtKS qhacIxKEuQ83nmB5Qr/xNLYxgX0fFxOcK/Hbt6A5udCIYtiQOmRfmq9L9ofLx/VzR4RY beoyqhb1HMRIuag3AXb0TacN14uZ7xXsFG/SBz8asIeCtH0DehQZJ3tWKUJGQ1nJPI0V defQ== Received: by 10.112.29.104 with SMTP id j8mr8934537lbh.0.1356363467649; Mon, 24 Dec 2012 07:37:47 -0800 (PST) MIME-Version: 1.0 Received: by 10.112.162.100 with HTTP; Mon, 24 Dec 2012 07:37:16 -0800 (PST) In-Reply-To: References: <201212230805.qBN850Pj083122@narawntapu.narawntapu> <50D7287C.7020802@aldan.algebra.com> <20121223162332.GA38788@pit.databus.com> <50D86D60.2060506@aldan.algebra.com> From: Eitan Adler Date: Mon, 24 Dec 2012 10:37:16 -0500 Message-ID: Subject: Re: What is "negative group permissions"? (Re: narawntapu security run output) To: jb Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQmgPA0AYotR7ZXfj8GFQH5PyCkExYjpLToUBe+CRsSrRuSTEbulqKaX0B+7gaaZUwdiP7fn Cc: freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Dec 2012 15:37:50 -0000 On 24 December 2012 10:27, jb wrote: > Those security checks are for a reason - people make mistakes (even a perfect > guy like you will have a "head in a brown bag" time). > It is better to get a heads-up, then think about it and turn it off (customize) > if considered unneeded. +1. Default to helping the new user (or the user that makes mistakes). -- Eitan Adler