[6032] in RedHat Linux List
Suggestion for next redhat release.
daemon@ATHENA.MIT.EDU (Chris Evans)
Mon Nov 25 14:38:51 1996
Date: Mon, 25 Nov 1996 18:41:43 +0000 (GMT)
From: Chris Evans <chris@ferret.lmh.ox.ac.uk>
To: redhat-list@redhat.com
In-Reply-To: <3299DAA4.2EBC137@moltech.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
I notice that group "disk" is shared between both hard AND floppy drives.
I really think that floppy block devices should be group 'floppy', (and
permission -rw-rw---) so that people logging in at the console can be
given the extra group 'floppy' via the new powerful PAM modules.
Similar considerations for new groups 'audio' and _MOST DEFINITELY_
'xpriv'. This latter one is allowed to execute the XF86_* binaries,
"others" should not be able to do this. Someone logging in via telnet can
type 'startx' and really p*** off people at the console.
Read permission for "other" on /dev/fd0 etc. is also somewhat lax in the
security department. See above solution.
Comments..?
Chris.
PS I missed any replies that may or may not have been given about broken
XFree86-3.2 fonts packages as well as broken ytalk.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
