🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: gnu.utils.bug
Article #901

Re: GNU su doesn't restrict root access? Why?

#901
From: Malte Uhl
Date: Tue, 13 Oct 1992 09:06
27 lines
1796 bytes
In article <9210130527.AA02711@mole.gnu.ai.mit.edu>, rms@gnu.ai.mit.edu (Richard Stallman) writes:
|> What does it mean to resist fascism?
|> 
|> Sometimes a few of the users try to hold total power over all the
|> rest.  For example, in 1984, a few users at the MIT AI lab decided to
|> seize power by changing the operator password on the Twenex system and
|> keeping it secret from everyone else.  (I was able to thwart this coup
|> and give power back to the users by patching the kernel, but I
|> wouldn't know how to do that in Unix.)
|> 
|> However, occasionally the rulers do tell someone.  Under the usual su
|> mechanism, once someone learns the root password who sympathizes with
|> the ordinary users, he can tell the rest.  The "wheel group" feature
|> would make this impossible, and thus cement the power of the rulers.
|> 
[ ... ]

If this someone knows the root password, she or he will usually have the power
to change the members in the wheel group, especially to delete every member
in it. Then everyone is allowed to su to root.
So this is almost pointless.

Of course, it is a matter of policy to code su one way or the other. I'd just
be grateful if you wouldn't call me fascist for supporting the security
topic.

Malte
Technical Details
Message-ID: <1992Oct13.090620.11252@unibi.uni-bielefeld.de>
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!techfak.uni-bielefeld.DE!malte
References: <1992Oct12.050623.21604@muddcs.claremont.edu>

Show Full Headers
Complete Article Headers
Newsgroups: gnu.utils.bug
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!techfak.uni-bielefeld.DE!malte
From: malte@techfak.uni-bielefeld.DE (Malte Uhl)
Subject: Re: GNU su doesn't restrict root access?  Why?
Message-ID: <1992Oct13.090620.11252@unibi.uni-bielefeld.de>
Sender: gnulists@ai.mit.edu
Organization: Universitaet Bielefeld, Technische Fakultaet.
References: <1992Oct12.050623.21604@muddcs.claremont.edu> 
Distribution: gnu
Date: Tue, 13 Oct 1992 09:06:20 GMT
Approved: bug-gnu-utils@prep.ai.mit.edu
Lines: 29