[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: root login



On Mon, Apr 28, 2003 at 10:24:10PM -0500, demonbane@the-love-shack.net wrote:
 
> And finally, what if, say Mozilla, ends up having a security hole as
> serious as the Office XP + IE security problem from a while ago that
> allowed remote sites to execute commands on your computer. rm -rf /* seems
> like a prime candidate for a malicious attack but losing /tmp doesn't
> really worry me all that much.

Compared to losing my Debian installation (I am quite good at installing
systems from scratch... :), I have by far a bigger problem with somebody
doing rm -Rf /home/torsten on my system. And this can be done as my 
normal user...

The point in running as a user really starts making sense if you have a 
number of persons running the computer. If somebody uses a web browser 
with security holes and gets his $HOME removed, nobody else on the
system should be affected.

Greetings

	Torsten

Attachment: pgpxJAeXzKjsm.pgp
Description: PGP signature


Reply to: