Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Jul 1997 07:41:50 +0200
From:      Andreas Klemm <andreas@klemm.gtn.com>
To:        Jaye Mathisen <mrcpu@cdsnet.net>
Cc:        Terry Lambert <terry@lambert.org>, sthaug@nethelp.no, hackers@FreeBSD.ORG
Subject:   Re: sendmail complains about being unable to write his pid file
Message-ID:  <19970722074150.52808@gtn.com>
In-Reply-To: <Pine.NEB.3.95.970721151455.28740J-100000@mail.cdsnet.net>; from Jaye Mathisen on Mon, Jul 21, 1997 at 03:19:33PM -0700
References:  <199707212106.OAA11898@phaeton.artisoft.com> <Pine.NEB.3.95.970721151455.28740J-100000@mail.cdsnet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jul 21, 1997 at 03:19:33PM -0700, Jaye Mathisen wrote:
> 
> Well, just to throw in my 2 bits, I don't really care who owns it, because
> if root is compromised, who gives a flying leap about files being bin.bin,
> your system is still open.

Ok, true, but we don't speak about an already compromised server machine,
we speak about a server machine, that might be less compromised, by
giving the files other permissions.

Ok, I also agree, that it's not a fine thing to do the following:

server: /etc/exports		/usr	rw=client1
server: /etc/hosts.equiv	client1

But if someone would do so who is not such a security freak, it
would help, that the machine isn't crashed within minutes ...


-- 
Andreas Klemm | klemm.gtn.com - powered by
                    Symmetric MultiProcessor FreeBSD
                       http://www.freebsd.org/~fsmp/SMP/SMP.html
                          http://www.freebsd.org/~fsmp/SMP/benches.html



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19970722074150.52808>