Re: improved (?) security by requiring full path for commands issued by root?

Article View: comp.security.unix

Article #133

Back to comp.security.unix Previous Next

#133

From: Barry Margolin
Date: Fri, 09 Feb 2001 18:22

16 lines
2262 bytes

In article <3A837DE5.BA4726B4@none.for.me.com>,
bob  <bob@none.for.me.com> wrote:
>So, Barry, have you ever seen a sysadmin issue all commands with full
>paths?  Unfortunately, I've only worked one place since I started using
>Unix.  I've never seen it or heard of it.

No, I've never heard of a sysadmin doing this.  I've worked in two
Unix-based organizations, and been to LISA conferences and attended
security seminars, and never seen anyone suggest it before.  I thought I
implied all this when I referred to it as "extremely unusual".

-- 
Barry Margolin, barmar@genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

Technical Details

Message-ID: <GzWg6.21$4w6.5444@burlma1-snr2>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-04!supernews.com!xfer13.netnews.com!netnews.com!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail

References:

<3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A837DE5.BA4726B4@none.for.me.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2a5221006d4e0ad9
X-Google-Attributes: gid10952f,public
X-Google-Thread: 10e732,2a5221006d4e0ad9
X-Google-Attributes: gid10e732,public
X-Google-Thread: 1133d0,2a5221006d4e0ad9
X-Google-Attributes: gid1133d0,public
X-Google-ArrivalTime: 2001-02-09 10:22:31 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-04!supernews.com!xfer13.netnews.com!netnews.com!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail
From: Barry Margolin <barmar@genuity.net>
Newsgroups: comp.security.unix,alt.os.security,cern.security.unix
Subject: Re: improved (?) security by requiring full path for commands issued by 
 root?
References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A837DE5.BA4726B4@none.for.me.com>
Organization: Genuity, Cambridge, MA
Mail-Copies-To: never
X-Newsreader: trn 4.0-test72 (19 April 1999)
Originator: barmar@genuity.net (Barry Margolin)
Lines: 16
Message-ID: <GzWg6.21$4w6.5444@burlma1-snr2>
X-Trace: /wzbxfostSZNcF1N+RerIxwaK67C23gsvQXscvq0oKY2pghXyhmN6J6YswYiTGMgEX98lNGyWNMf!nLU6GKFuSbz8qIDjkmZ+MpRZl+kqWX7O+zkBsQysXBIgkmWQ13imBuv5G7Q=
X-Complaints-To: abuse@genuity.net
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly
NNTP-Posting-Date: Fri, 09 Feb 2001 18:22:30 GMT
Distribution: world
Date: Fri, 09 Feb 2001 18:22:30 GMT

Reply to Parent Message