Re: improved (?) security by requiring full path for commands issued by root?

Article View: comp.security.unix

Article #131

Back to comp.security.unix Previous Next

#131

From: bob
Date: Fri, 09 Feb 2001 05:19

25 lines
2353 bytes

bob wrote:
> >> A) No unix/linux/bsd sysadmin in the history of the world has ever
> >> followed or will ever follow this policy (correct me if I'm wrong).
> >

Then Anders Thulin  <Anders.X.Thulin@telia.se> wrote:
> >  Is that a particularly good argument? You will surely be expected
> >to prove your point well enough --  at least show that you have
> >comprehensive information on the practices of every unix/linux/bsd
> >sysadmin during the period you indicate.


Then Barry Margolin wrote:
> 
> 
> Anyone who has worked in a few different organizations can probably
> describe common habits of sysadmins and recognize something that's
> extremely unusual.  For something like this, a comprehensive survey is
> hardly necessary.

So, Barry, have you ever seen a sysadmin issue all commands with full
paths?  Unfortunately, I've only worked one place since I started using
Unix.  I've never seen it or heard of it.

Any help is much appreciated.

Technical Details

Message-ID: <3A837DE5.BA4726B4@none.for.me.com>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!209.50.235.254!europa.netcrusader.net!64.154.60.72!news-out.usenetserver.com!telocity-west!TELOCITY!newsrump.sjc.telocity.net!not-for-mail

References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2a5221006d4e0ad9
X-Google-Attributes: gid10952f,public
X-Google-Thread: 10e732,2a5221006d4e0ad9
X-Google-Attributes: gid10e732,public
X-Google-Thread: 1133d0,2a5221006d4e0ad9
X-Google-Attributes: gid1133d0,public
X-Google-ArrivalTime: 2001-02-08 21:19:48 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!209.50.235.254!europa.netcrusader.net!64.154.60.72!news-out.usenetserver.com!telocity-west!TELOCITY!newsrump.sjc.telocity.net!not-for-mail
Message-ID: <3A837DE5.BA4726B4@none.for.me.com>
From: bob <bob@none.for.me.com>
X-Mailer: Mozilla 4.74 [en] (X11; U; Linux 2.2.16 i686)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.security.unix,alt.os.security,cern.security.unix
Subject: Re: improved (?) security by requiring full path for commands issued by 
 root?
References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 25
X-Trace: MjU8Tm9BaXRoVXNlbiBURVBPQ0lIWS1SWUFERVJTPDIxNjIyMjcuMTIuLTkzICBUaHUwIDA4IEZ5!YiAyMDAxIDIxOjE5OjM1IFBTVA==
X-Abuse-Info: Please forward ALL headers when reporting abuse.
X-Complaints-To: abuse@telocity.net
NNTP-Posting-Date: Thu, 08 Feb 2001 21:19:35 PST
Date: Thu, 08 Feb 2001 23:19:33 -0600

Reply to Parent Message