Article View: comp.security.misc
Article #432Re: Security Policy
From: Rob J. Nauta
Date: Thu, 20 Aug 1992 21:02
Date: Thu, 20 Aug 1992 21:02
26 lines
1773 bytes
1773 bytes
Why not just use the good old fascist method ? It's used by 90% of the sites connected, so it's been proven to be effective (although not very satisfactory for the users). In general, start out with no rules. If someone offends or annoys the operator (detection is based on luck/chance), a punishment is found, based on a whim, the mood of the operator at the moment, etc. Don't bother with letting the user explain why he ran the 'crontab' command, if he knows how it works, he's obviously a hacker, and you'd better shut them up. Ridiculize the offender in public, eg. if he uses too many diskspace, or uses ftp too much, remind users in the /etc/motd to be careful with ftp'ing GIF's, or they will end up as J. Random User, who lost his account for using the company's system for collecting pornography. Right now, you must think I'm crazy, that nobody has this system. Well, you are wrong, most system admins start out this way, with no written rules, rules that are hastily created and applied to cover past actions. The EFF can tell you thousands of stories, collected from people who lost their account on a whim of the mighty root. Rob -- /-----------------------------------------------\ Never ,==. | Rob J. Nauta, UNIX computer security expert. | Apologize, /@ | | rob@wzv.win.tue.nl, Phone: +31-40-837549 | Never /_ < | Feel free to email me for free advice | Explain. =" `g'
Technical Details
Message-ID:
<3748@wzv.win.tue.nl>Path:
arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin02!wzv!robReferences:
<1992Aug19.195116.1885@zia.aoc.nrao.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin02!wzv!rob From: rob@wzv.win.tue.nl (Rob J. Nauta) Newsgroups: comp.security.misc Subject: Re: Security Policy Message-ID: <3748@wzv.win.tue.nl> Date: 20 Aug 92 21:02:37 GMT References: <1992Aug19.195116.1885@zia.aoc.nrao.edu> Organization: Sex, UNIX & Rock 'n Roll Lines: 26