[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: horse carcas flogging (was: traceroute in /usr/bin, not /usr/sbin)



Adam McKenna writes:
> On Fri, Jun 22, 2001 at 02:34:49PM +0100, Richard Kettlewell wrote:
>> Adam McKenna writes:

>>> Traceroute is an admin tool, but not all admins have root, which
>>> is WHY I suggested the default ownership/permissions be changed.
>> 
>> traceroute has been used, for legitimate technical reasons, by
>> users who are not in any way administrators of the machine it is
>> installed on, for years.
> 
> What you mean is, that it's been used by lusers who have no business
> running it.  The fact that they (or you) think they are using it
> legitimiately is immaterial.  If you're giving random lusers shells,
> it's bad enough.  If you want them to be able to run traceroute, set
> up a traceroute cgi.

I'm not talking about "random lusers", I'm talking about people with
leigitimate reasons for having logins on the systems under discussion,
and legitimate reasons for running network diagnostic tools, who
happen not to be adminstrators of those systems.  Was this not clear
from my previous remarks?

ttfn/rjk



Reply to: