Date: Thu, 22 Nov 2001 13:07:39 -0700 From: Warner Losh <imp@harmony.village.org> To: Hiten Pandya <hitmaster2k@yahoo.com> Cc: current@FreeBSD.ORG Subject: Re: [SUGGESTION] - disallowing shutdown after su(1) Message-ID: <200111222007.fAMK7d718205@harmony.village.org> In-Reply-To: Your message of "Thu, 22 Nov 2001 06:40:11 PST." <20011122144011.50097.qmail@web21104.mail.yahoo.com> References: <20011122144011.50097.qmail@web21104.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <20011122144011.50097.qmail@web21104.mail.yahoo.com> Hiten Pandya writes: : correct me if i am wrong.. but.. : do you think, if we denied a shutdown after an su(1) : to root from a non-privileged user would be good... I think it would be a horrible idea. : this would be very good, i think if someone broke into : a normal user and was able to gain access into root : using su... (without a password..) This is the real problem. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200111222007.fAMK7d718205>