Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Aug 1998 15:47:48 -0400 (EDT)
From:      Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
To:        Jon Hamilton <hamilton@pobox.com>
Cc:        Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, dima@best.net, jkh@time.cdrom.com, security@FreeBSD.ORG
Subject:   Re: Scaring the bezeesus out of your system admin as a normal user: 
Message-ID:  <199808211947.PAA15656@khavrinen.lcs.mit.edu>
In-Reply-To: <199808211915.MAA18409@hub.freebsd.org>
References:  <199808211638.MAA15257@khavrinen.lcs.mit.edu> <199808211915.MAA18409@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Fri, 21 Aug 1998 14:19:00 -0500, Jon Hamilton <hamilton@pobox.com> said:

> } You missed the point.  Credentials passed over PF_LOCAL sockets are by
> } design unforgeable.

> That doesn't address remote logging, however.

Surely not.  Remote logging, in the syslog mode, is inescapably
insecure.

-GAWollman

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollman@lcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808211947.PAA15656>