Re: Does Security matter at all?

["Christopher W. Curtis" <ccurtis@aet-usa.com>]

Ari Makela wrote:
> 
> Alexander N. Benner writes:
> > Hi
> > I am realy puzzled by some discussions here.
> > 1st the quite obvious security *BUG* in the MBR, then the discussion about
> > autofs.
> > I get the idea that Debian, at least some developers here, do not care at all
> > about security as long as it reduces felxibility or comfort.
> 
> Why? There's absolutely no way to secure a system when untrusted
> people have physical access to the computer. Computers with
> confidential information must be behind locked doors. As has been

Define untrusted.  In order to exploit the autofs misconfiguration, you
have to have a shell account on that computer.  Anyone ever hear of
disgruntled employee?

> repeated in this thread many times. There is no other solution. It's

The solution is trivial.  It exists in /etc/fstab

> It's of no use to lock you doors when you have a tank sized hole in
> your wall.

"There is a tank sized hole in the wall, but if someone really wanted to
get in anyway, they would just break through the deadbolted magnetic
card swipe door guarded by a small army of men, dogs and boobytraps".

I still don't buy it.

Christopher