Re: improved (?) security by requiring full path for commands issued by root?

Article View: comp.security.unix

Article #130

Back to comp.security.unix Previous Next

#130

From: Barry Margolin
Date: Thu, 08 Feb 2001 21:21

21 lines
2372 bytes

In article <3A8250E2.31940B6A@telia.se>,
Anders Thulin  <Anders.X.Thulin@telia.se> wrote:
>bob wrote:
>> A) No unix/linux/bsd sysadmin in the history of the world has ever
>> followed or will ever follow this policy (correct me if I'm wrong).
>
>  Is that a particularly good argument? You will surely be expected
>to prove your point well enough --  at least show that you have
>comprehensive information on the practices of every unix/linux/bsd
>sysadmin during the period you indicate. 

Anyone who has worked in a few different organizations can probably
describe common habits of sysadmins and recognize something that's
extremely unusual.  For something like this, a comprehensive survey is
hardly necessary.

-- 
Barry Margolin, barmar@genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

Technical Details

Message-ID: <45Eg6.4$4w6.823@burlma1-snr2>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!134.222.94.5!npeer.kpnqwest.net!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail

References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2a5221006d4e0ad9
X-Google-Attributes: gid10952f,public
X-Google-Thread: 10e732,2a5221006d4e0ad9
X-Google-Attributes: gid10e732,public
X-Google-Thread: 1133d0,2a5221006d4e0ad9
X-Google-Attributes: gid1133d0,public
X-Google-ArrivalTime: 2001-02-08 13:21:13 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!134.222.94.5!npeer.kpnqwest.net!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail
From: Barry Margolin <barmar@genuity.net>
Newsgroups: comp.security.unix,alt.os.security,cern.security.unix
Subject: Re: improved (?) security by requiring full path for commands issued by 
 root?
References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se>
Organization: Genuity, Cambridge, MA
Mail-Copies-To: never
X-Newsreader: trn 4.0-test72 (19 April 1999)
Originator: barmar@genuity.net (Barry Margolin)
Lines: 21
Message-ID: <45Eg6.4$4w6.823@burlma1-snr2>
X-Trace: /KiKeTdtob6phtUVYcNkqkfc3GzX1ty0O9X5TR01Gi4e95h2QutKw6rdHtXNiBRqpADrkWt1xhRH!AEAIJFMKyHV4ZP0BbL7fXK/s6A5OrW6unVt4vStKa1jg6QFVgxLyJEJF
X-Complaints-To: abuse@genuity.net
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly
NNTP-Posting-Date: Thu, 08 Feb 2001 21:21:04 GMT
Distribution: world
Date: Thu, 08 Feb 2001 21:21:04 GMT

Reply to Parent Message