Re: Rational for debian group accounts

[Bernd Eckenfels <lists@lina.inka.de>]

Hello,

> Right now I use groups to give users access to certain classes of
> programs, or even to individual programs, on a case by case basis.  Is
> this the correct way to use groups?  Am I missing something?

Actually using Access Control for Programs is less effective then using
access control for Data (unless the Programs run SUID or SGID). If you limit
access to a program, the the user can and will install her own copy.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels@Wittumstrasse13.76646Bruchsal.de --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes@irc  +4972573817  BE5-RIPE
(O____O)       If privacy is outlawed only Outlaws have privacy


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .