[4496] in RedHat Linux List
Device Permissions (was CD-ROM Changers)
daemon@ATHENA.MIT.EDU (Allan Black)
Fri Nov 15 08:22:54 1996
From: Allan Black <allan@scotnet.co.uk>
To: redhat-list@redhat.com
Date: Fri, 15 Nov 96 13:20:35 GMT
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Sorry if you've seen this twice, but I think my original reply went astray...
> Discussion about whether or not the permissions on /dev/hd* should be
> brw-rw---- or brw-rw-r-- and whether brw-rw-r-- constitutes a "security"
> problem ....
If an ordinary user can read the device file, they can easily extract the
contents of any file in the filesystem. The tools you need to do this are
available in RPM format, at ftp.redhat.com and most mirror sites :-)
Moral: don't grant world-read access on filesystems. (I prefer mode 640).
Allan
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
