Re: improved (?) security by requiring full path for commands issued by root?

Article View: comp.security.unix

Article #134

Back to comp.security.unix Previous Next

#134

From: Barry Margolin
Date: Fri, 09 Feb 2001 18:26

20 lines
2402 bytes

In article <3A83AA16.91A4731F@telia.se>,
Anders Thulin  <Anders.X.Thulin@telia.se> wrote:
>  Refusal to follow the rule may be taken as an indication of a problem
>by a reasonably enlightened management.

I think referring to disobeying this policy as "refusal" is inappropriate.
That suggests active defiance of the rule.  It's more likely that they'll
simply forget, since it's different from the normal way they learned to use
Unix.

I would only call it "refusal" if the site configures root's shell with an
empty PATH, and the sysadmin manually changes the PATH to get around the
policy.  But as long as typing commands without full paths works, they're
unlikely to change their ingrained habits.

-- 
Barry Margolin, barmar@genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

Technical Details

Message-ID: <sDWg6.22$4w6.5438@burlma1-snr2>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!4.1.16.34!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail

References:

<3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A83AA16.91A4731F@telia.se>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2a5221006d4e0ad9
X-Google-Attributes: gid10952f,public
X-Google-Thread: 10e732,2a5221006d4e0ad9
X-Google-Attributes: gid10e732,public
X-Google-Thread: 1133d0,2a5221006d4e0ad9
X-Google-Attributes: gid1133d0,public
X-Google-ArrivalTime: 2001-02-09 10:26:33 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.tele.dk!4.1.16.34!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail
From: Barry Margolin <barmar@genuity.net>
Newsgroups: comp.security.unix,alt.os.security,cern.security.unix
Subject: Re: improved (?) security by requiring full path for commands issued by 
 root?
References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A83AA16.91A4731F@telia.se>
Organization: Genuity, Cambridge, MA
Mail-Copies-To: never
X-Newsreader: trn 4.0-test72 (19 April 1999)
Originator: barmar@genuity.net (Barry Margolin)
Lines: 20
Message-ID: <sDWg6.22$4w6.5438@burlma1-snr2>
X-Trace: /Kkf2K26z+7ehGMyH5xKyct69s/egag+hFfXM8ViwlhnVwbgDRIMPgeGWgMLv908Q5g2hsBXOpQO!wQeF56ivLdlv5FZJ6i5fCfxw75BxgC4ToNBqqoYS3+054h8YVdydlENxAuQ=
X-Complaints-To: abuse@genuity.net
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly
NNTP-Posting-Date: Fri, 09 Feb 2001 18:26:32 GMT
Distribution: world
Date: Fri, 09 Feb 2001 18:26:32 GMT

Reply to Parent Message