Date: Wed, 4 Oct 2000 12:17:01 -0700 From: Kris Kennaway <kris@FreeBSD.org> To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> Cc: Kris Kennaway <kris@FreeBSD.ORG>, Dima Dorfman <dima@unixfreak.org>, Alfred Perlstein <bright@wintelcom.net>, Mike Silbersack <silby@silby.com>, security@FreeBSD.ORG Subject: Re: BSD chpass (fwd) Message-ID: <20001004121701.C73561@freefall.freebsd.org> In-Reply-To: <200010041447.KAA54350@khavrinen.lcs.mit.edu>; from wollman@khavrinen.lcs.mit.edu on Wed, Oct 04, 2000 at 10:47:15AM -0400 References: <20001004021948.A76230@freefall.freebsd.org> <20001004092758.335931F0A@static.unixfreak.org> <20001004023249.B76230@freefall.freebsd.org> <200010041447.KAA54350@khavrinen.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Oct 04, 2000 at 10:47:15AM -0400, Garrett Wollman wrote:
> <<On Wed, 4 Oct 2000 02:32:49 -0700, Kris Kennaway <kris@FreeBSD.ORG> said:
>
> > I think you're right. Which is a good reason why your /usr/bin should
> > be schg too ;-)
>
> Actually, sappnd on all the directories which might be in (or on the
> way to) root's path would be enough.
Except you can still just mount a doctored copy over the top of it :-)
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001004121701.C73561>