Re: improved (?) security by requiring full path for commands issued by root?

Article View: comp.security.unix

Article #147

Back to comp.security.unix Previous Next

#147

From: Tomasz Korycki
Date: Fri, 16 Feb 2001 09:14

18 lines
2073 bytes

bob wrote:
> Know of any likje this for linux or solaris?
> 
> Thanx for the help.
> 
> - Bob

  You can get a C2 version of Solaris. You pay rather more for it.

  With Linux it is rather difficult, since certification doesn't have a
lot of meaning when any user can change any tool included in any
distribution. Therefore I do not think we will see any C2 (or any other
colourful-book) certified Linux. I believe there is an effort ongoing at
NSA to do _something_, but You'd be well advised to examine the sources
_vary_ closely between download and compile.

  You can get even B-class unixen, if You're willing to pay. They exist,
though not in the regular pricebooks... Well, maybe except for SCO.

Technical Details

Message-ID: <3A8CEF90.71C74DEC@flow.mine.nu>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!newsfeed.wirehub.nl!howland.erols.net!newshub2.home.com!news.home.com!news3.rdc1.on.home.com.POSTED!not-for-mail

References: <3A822606.E06E411E@none.for.me.com> <3A82E4A9.AE6F278B@nogui.se> <3A8C1C0A.CAB78DC1@none.for.me.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2a5221006d4e0ad9
X-Google-Attributes: gid10952f,public
X-Google-Thread: 1133d0,2a5221006d4e0ad9
X-Google-Attributes: gid1133d0,public
X-Google-Thread: 10e732,2a5221006d4e0ad9
X-Google-Attributes: gid10e732,public
X-Google-ArrivalTime: 2001-02-16 01:16:05 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!newsfeed.wirehub.nl!howland.erols.net!newshub2.home.com!news.home.com!news3.rdc1.on.home.com.POSTED!not-for-mail
Message-ID: <3A8CEF90.71C74DEC@flow.mine.nu>
From: Tomasz Korycki <engine2@flow.mine.nu>
X-Mailer: Mozilla 4.7 [en] (Win98; U)
X-Accept-Language: en,pl
MIME-Version: 1.0
Newsgroups: comp.security.unix,alt.os.security,cern.security.unix
Subject: Re: improved (?) security by requiring full path for commands issued by 
 root?
References: <3A822606.E06E411E@none.for.me.com> <3A82E4A9.AE6F278B@nogui.se> <3A8C1C0A.CAB78DC1@none.for.me.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 18
Date: Fri, 16 Feb 2001 09:14:57 GMT
NNTP-Posting-Host: 24.112.191.14
X-Complaints-To: abuse@home.net
X-Trace: news3.rdc1.on.home.com 982314897 24.112.191.14 (Fri, 16 Feb 2001 01:14:57 PST)
NNTP-Posting-Date: Fri, 16 Feb 2001 01:14:57 PST
Organization: Excite@Home - The Leader in Broadband http://home.com/faster

Reply to Parent Message