From owner-freebsd-audit Thu Oct 4 23:16:34 2001 Delivered-To: freebsd-audit@freebsd.org Received: from obsecurity.dyndns.org (adsl-64-165-226-227.dsl.lsan03.pacbell.net [64.165.226.227]) by hub.freebsd.org (Postfix) with ESMTP id 7E48237B40D for ; Thu, 4 Oct 2001 23:16:21 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 0192A66E30; Thu, 4 Oct 2001 23:16:20 -0700 (PDT) Date: Thu, 4 Oct 2001 23:16:20 -0700 From: Kris Kennaway To: cjclark@alum.mit.edu Cc: freebsd-audit@freebsd.org Subject: Re: Misuse of 'nobody' user for locate(1) Message-ID: <20011004231620.A59589@xor.obsecurity.org> References: <20010920205706.A3050@blossom.cjclark.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="VS++wcV0S1rZb1Fb" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010920205706.A3050@blossom.cjclark.org>; from cristjc@earthlink.net on Thu, Sep 20, 2001 at 08:57:07PM -0700 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --VS++wcV0S1rZb1Fb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Sep 20, 2001 at 08:57:07PM -0700, Crist J. Clark wrote: > The original purpose of the 'nobody' user was for "anonymous" NFS > access. This is the account to which the superuser on a remote system > is mapped. The idea is to have a user that owns no files on the > system nor is a member of a group that has group ownership of a > file. File acesss for this user is always determined by the world > permission bits. Excellent, thanks! Kris --VS++wcV0S1rZb1Fb Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7vVA0Wry0BWjoQKURAi0xAKCdEgQz2pw2m6W5tKUT5I15r7quzgCeJ7qh VA/vHx0crLknHiVGoPrzobM= =lAOo -----END PGP SIGNATURE----- --VS++wcV0S1rZb1Fb-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message