Date: Tue, 28 May 2013 22:45:19 -0600 (MDT) From: Warren Block <wblock@wonkity.com> To: Warner Losh <imp@bsdimp.com> Cc: svn-doc-projects@freebsd.org, Tom Rhodes <trhodes@freebsd.org>, doc-committers@freebsd.org, Benjamin Kaduk <kaduk@MIT.EDU> Subject: Re: svn commit: r41757 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers Message-ID: <alpine.BSF.2.00.1305282226560.50606@wonkity.com> In-Reply-To: <BD6C2C8F-CFA3-4463-B9CF-614DEF51224B@bsdimp.com> References: <201305272048.r4RKmBFF051879@svn.freebsd.org> <alpine.GSO.1.10.1305281505160.9389@multics.mit.edu> <alpine.BSF.2.00.1305281826090.49386@wonkity.com> <BD6C2C8F-CFA3-4463-B9CF-614DEF51224B@bsdimp.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 28 May 2013, Warner Losh wrote: > > On May 28, 2013, at 6:30 PM, Warren Block wrote: > >> On Tue, 28 May 2013, Benjamin Kaduk wrote: >> >>> On Mon, 27 May 2013, Tom Rhodes wrote: >>> >>>> Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml >>>> ============================================================================== >>>> --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Mon May 27 20:33:31 2013 (r41756) >>>> +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Mon May 27 20:48:10 2013 (r41757) >> >>>> + NIS maps</emphasis>. These users and passwords should >>>> + not be propagating to all machines. Especially if these >>> >>> propagating vs. propagated is an interesting question, here. >> >> The "should not" is unclear. Does it mean >> >> * "it is not supposed to happen, but sometimes does anyway" >> * "it is undesirable from a security standpoint" > > You shouldn't do it (it == add them to the NIS master password file) because it is a security problem if you do. Right. This is another situation where the imperative is better. Don't tell them they shouldn't do it, just tell them *don't* do it, and why: Do not propagate these users and passwords to all machines... because the sky will open and vast clouds of devious, parachuted weasels will fall upon your ancestral lands, each with sharp teeth, claws, a bitter attitude, and a score to settle, most having failed in business school, or, in a few cases, the fast food industry.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1305282226560.50606>