From owner-freebsd-isp  Tue Jul 22 09:50:45 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id JAA10553
          for isp-outgoing; Tue, 22 Jul 1997 09:50:45 -0700 (PDT)
Received: from time.cdrom.com (root@time.cdrom.com [204.216.27.226])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA10546
          for <isp@FreeBSD.ORG>; Tue, 22 Jul 1997 09:50:41 -0700 (PDT)
Received: from time.cdrom.com (jkh@localhost.cdrom.com [127.0.0.1]) by time.cdrom.com (8.8.6/8.6.9) with ESMTP id JAA03508; Tue, 22 Jul 1997 09:49:11 -0700 (PDT)
To: Rick Morel <rmorel@morelr.com>
cc: isp@FreeBSD.ORG
Subject: Re: FTP Problem 
In-reply-to: Your message of "Tue, 22 Jul 1997 11:42:34 CDT."
             <2.2.32.19970722164234.0091eee0@mail.morelr.com> 
Date: Tue, 22 Jul 1997 09:49:11 -0700
Message-ID: <3504.869590151@time.cdrom.com>
From: "Jordan K. Hubbard" <jkh@time.cdrom.com>
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> Agggghhhh! A _FEATURE_! (Insert Twilight Zone Theme here) I've been warped
> into a Microsoft list! A _FEATURE_! :-)

Yep, a feature, and you actually have the Microsoft case backwards.
What they'd allow you to do is ONLY have the user be restricted to a
small sandbox and getting at any other files because, say, the user
was an administrator, would be impossible out-of-the-box and you'd
have articles in NT user about how to work around this limitation with
all sorts of wizardly tricks.

> Really? Seems like that's "releasing" a lot of info the "great unwashed"
> shouldn't be privy to.

Well, UNIX systems have been typically run in environments where the
"great unwashed" is actually a skilled userbase who would be extremely
displeased _not_ to have this work (as would I since it violates the
principle of least astonishment all over the place to have the trusted
user so constrained).  It's only comparatively recently that ISPs and
their shell account machines have essentially introduced the new
phenomenon of mixing truly unskilled & potentially hostile users to
the UNIX environment, and it will take some time to figure out what
security issues are raised by this and deal with them accordingly.

					Jordan