🚀 go-pugleaf

lemson@ux1.cso.uiuc.edu (David Lemson) writes:
>Why is / 1777 ?  Plenty of people like to make directories off of
>their root without having to become root to do this.  Maybe they
>'shouldn't', but it isn't that big of a deal when you are the only
>one who uses this machine.

Actually, I found it to be a very big deal when I clicked on a
directory as some big image was being rendered (and the system became
jumpy, but the mouse still moved freely) and went to click on my Edit
icon in my dock (located just above the recycler).  A file I had
clicked on what I thought to be once ended up being dragged into the
recycler (since the path my mouse went to get to the Edit icon went
past the recycler).  Had I not noticed the dot in the recycler when I
purposefully went to recycle some files later on, I might have
inadvertantly recycled some very important system-level stuff.  I was
root at the time, so everything became deletable.

Also, with the root dir world-writeable, someone could quickly click
on Initialize instead of Eject, routinely say "Yes" to the panel that
comes up and reformat their hard disk.

I would think that it would benefit people if more accident-proofing
were put in from the start, like making the root directory only
root-writeable, as mentioned in the Network and System Administration
manual.

>Why is Preferences setuid root?  So that you can change the time
>without having to log in as root, which people shouldn't be doing
>all the time anyway.

Actually, my NeXT as well as 8 other NeXTs I know of came from NeXT
with the right time already set (only the timezone needed fixing).
Based on these occurrences, I would gamble that every NeXT has the
right time set.  Since this is something that people shouldn't be
messing with anyhow and the timezone only needs to be adjusted once
(thanks to the excellent automation of daylight savings time), why
ship with setuid?  Since NeXT knows where each NeXT goes anyhow (if
they know from the production line), they could even set the timezone
so it is received by the customer ready-to-go as far as the computer
clock goes.

To me, these are things that wouldn't cause any problem since they can
be tweaked or set once and forgotten about, and they have the added
advantage of not costing anything to implement at the factory.  If the
users want to remove the protection, I'd say that that is their
business, but I wouldn't want to have the computer for only a couple
of days and accidentally trash something necessary.

Anyways, my original question still stands on whether 3.0's daemons
are trustworthy or do we still need to go elsewhere to get ones that
protect against invaders.
-- 
-- Jeff (jeffo@ux1.cso.uiuc.edu)
-- No NeXTmail please