Article View: comp.security.unix
Article #146Re: improved (?) security by requiring full path for commands issued by root?
From: mack23
Date: Thu, 15 Feb 2001 18:28
Date: Thu, 15 Feb 2001 18:28
20 lines
2064 bytes
2064 bytes
In article <3A837DE5.BA4726B4@none.for.me.com>, bob <bob@none.for.me.com> wrote: > >So, Barry, have you ever seen a sysadmin issue all commands with full >paths? Unfortunately, I've only worked one place since I started using >Unix. I've never seen it or heard of it. No, he hasn't. (I'm going out on a limb here, but what the heck) :^) The only reason to not allow ./foo, and instead require /some/path/to/foo, is to make sure that root doesn't run the wrong "foo" because (s)he forgot what her cwd was. That is a laudable goal, but the means by which they are attempting to achieve it are too burdensome to make it worthwhile. You'd be better off cooking up some hack that that prints the current directory as part of root's shell prompt. I do not mean to restart the "Changing root's shell considered harmful" thread ;^) Chris
Technical Details
Message-ID:
<96h73i$rq$1@bob.news.rcn.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-04!supernews.com!xfer13.netnews.com!netnews.com!feed2.news.rcn.net!feed1.news.rcn.net!rcn!not-for-mailReferences:
<3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A837DE5.BA4726B4@none.for.me.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10952f,2a5221006d4e0ad9 X-Google-Attributes: gid10952f,public X-Google-Thread: 10e732,2a5221006d4e0ad9 X-Google-Attributes: gid10e732,public X-Google-Thread: 1133d0,2a5221006d4e0ad9 X-Google-Attributes: gid1133d0,public X-Google-ArrivalTime: 2001-02-15 10:29:02 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-04!supernews.com!xfer13.netnews.com!netnews.com!feed2.news.rcn.net!feed1.news.rcn.net!rcn!not-for-mail From: mack23@enteract.com (mack23 ) Newsgroups: comp.security.unix,alt.os.security,cern.security.unix Subject: Re: improved (?) security by requiring full path for commands issued by root? Date: 15 Feb 2001 18:28:02 GMT Organization: EnterAct Corp Turbo-Elite News Server Lines: 20 Message-ID: <96h73i$rq$1@bob.news.rcn.net> References: <3A822606.E06E411E@none.for.me.com> <3A8250E2.31940B6A@telia.se> <45Eg6.4$4w6.823@burlma1-snr2> <3A837DE5.BA4726B4@none.for.me.com> X-Trace: UmFuZG9tSVaD8+VlHv2Tvz0ReOKc5ynYmHLAm9VBXsnnPucViH+poqKvMDU06RyK X-Complaints-To: abuse@rcn.com NNTP-Posting-Date: 15 Feb 2001 18:28:02 GMT X-Newsreader: trn 4.0-test74 (May 26, 2000) Originator: mack23@enteract.com (mack23 )