From owner-cvs-all  Wed Dec  2 15:29:28 1998
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id PAA19541
          for cvs-all-outgoing; Wed, 2 Dec 1998 15:29:28 -0800 (PST)
          (envelope-from owner-cvs-all@FreeBSD.ORG)
Received: from burka.rdy.com (burka.rdy.com [205.149.163.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA19521;
          Wed, 2 Dec 1998 15:29:24 -0800 (PST)
          (envelope-from dima@burka.rdy.com)
Received: (from dima@localhost)
	by burka.rdy.com (8.9.1/RDY&DVV) id PAA86705;
	Wed, 2 Dec 1998 15:29:01 -0800 (PST)
Message-Id: <199812022329.PAA86705@burka.rdy.com>
Subject: Re: cvs commit: src/etc master.passwd
In-Reply-To: <19981203014511.A72032@nagual.pp.ru> from "Andrey A. Chernov" at "Dec 3, 1998  1:45:11 am"
To: ache@nagual.pp.ru (Andrey A. Chernov)
Date: Wed, 2 Dec 1998 15:29:00 -0800 (PST)
Cc: dima@best.net, guido@gvr.org, cvs-committers@FreeBSD.ORG,
        cvs-all@FreeBSD.ORG
X-Class: Fast
Organization: HackerDome
Reply-To: dima@best.net
From: dima@best.net (Dima Ruban)
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

Andrey A. Chernov writes:
> On Wed, Dec 02, 1998 at 01:35:50PM -0800, Dima Ruban wrote:
> > I think, it's bullshit change. I use operator account to do backups for
> > example. Now, this commit breaks half of my scripts. And I don't think I'm
> > the only one who actually uses it.
> > Please back it up.
> 
> No way, unless operator directory will be created by mtree.

I don't exactly see what's wrong with not having this directory created by
mtree.
If hacker on a given machine can create /usr/guest/operator or whatever is
the default, that it means that this dude has root access.
At this point you screwed either way.

> BTW, you not suppose to reflect this change from default freebsd passwd,
> remember I not touch _your_ passwd.

Yeah, you didn't touch my password file, but you forced everybody else
who potentially can use this feature to deal with your changes.

> -- 
> Andrey A. Chernov
> http://www.nagual.pp.ru/~ache/
> MTH/SH/HE S-- W-- N+ PEC>+ D A a++ C G>+ QH+(++) 666+>++ Y
> 

-- dima

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message