🚀 go-pugleaf

This is a multi-part message in MIME format.
--------------CC8C72541612CE7C469E2956
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

bob wrote:
> 
> Well, I wrote a nice little perl script to do this, thinking the script
> would be simple (which it was, actually), with the following results
> (which aren't simple):
> 
> Many commands on both linux and solaris are owned by other than root,
> users such as news, uucp, bin to name a few.  And on solaris many are
> writable by group, groups being similar to the preceding.
> 
> I suspect that these users cannot login (second field in /etc/shadow
> entry is '*') but I'm not sure of this.  So is this safe or what?  Where
> do I go from here?
> 
Right - more specifically the executable and the directories in its path
should only be writable by "trusted" users and groups. This also goes
for any shared libraries referenced by the executable. A user that
cannot log in can be considered trusted, as well as groups in which only
root or trusted users are members. You should be able to put this check
into your perl program as well fairly easily.

It would be nice to be able to have the kernel check this for you in
exec()...
--------------CC8C72541612CE7C469E2956
Content-Type: text/x-vcard; charset=us-ascii;
 name="palm.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Christer Palm
Content-Disposition: attachment;
 filename="palm.vcf"

begin:vcard 
n:Palm;Christer
tel;cell:+46 (70) 327 30 23
tel;fax:+46 (8) 23 49 01
tel;work:+46 (8) 23 49 00
x-mozilla-html:FALSE
url:http://www.nogui.se
org:NOGUI AB
adr:;;Palmfeltsv�gen 21;JOHANNESHOV;;SE-121 62;SWEDEN
version:2.1
email;internet:palm@nogui.se
title:UNIX-Specialist
x-mozilla-cpt:;-21600
fn:Christer Palm
end:vcard

--------------CC8C72541612CE7C469E2956--