Date: Wed, 2 Dec 1998 15:29:00 -0800 (PST) From: dima@best.net (Dima Ruban) To: ache@nagual.pp.ru (Andrey A. Chernov) Cc: dima@best.net, guido@gvr.org, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG Subject: Re: cvs commit: src/etc master.passwd Message-ID: <199812022329.PAA86705@burka.rdy.com> In-Reply-To: <19981203014511.A72032@nagual.pp.ru> from "Andrey A. Chernov" at "Dec 3, 1998 1:45:11 am"
next in thread | previous in thread | raw e-mail | index | archive | help
Andrey A. Chernov writes: > On Wed, Dec 02, 1998 at 01:35:50PM -0800, Dima Ruban wrote: > > I think, it's bullshit change. I use operator account to do backups for > > example. Now, this commit breaks half of my scripts. And I don't think I'm > > the only one who actually uses it. > > Please back it up. > > No way, unless operator directory will be created by mtree. I don't exactly see what's wrong with not having this directory created by mtree. If hacker on a given machine can create /usr/guest/operator or whatever is the default, that it means that this dude has root access. At this point you screwed either way. > BTW, you not suppose to reflect this change from default freebsd passwd, > remember I not touch _your_ passwd. Yeah, you didn't touch my password file, but you forced everybody else who potentially can use this feature to deal with your changes. > -- > Andrey A. Chernov > http://www.nagual.pp.ru/~ache/ > MTH/SH/HE S-- W-- N+ PEC>+ D A a++ C G>+ QH+(++) 666+>++ Y > -- dima To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812022329.PAA86705>