Re: Preparing Debian for using capabilities: file ownership.
In article <[🔎] 20000920222406.B426@debian.org>,
=?iso-8859-1?Q?Nicol=E1s_Lichtmaier?= <nick@debian.org> wrote:
> It seems that in order to take full advantage of capabilities, files should
>not be owned by root. Files should be owned by a non-login user (e.g. bin).
That would not be a logical step. Right now programs such as rlogin, ssh,
NFS etc make sure that you cannot login as root or that root rights
get smashed. If your box is cracked somehow, it often is the case that
people can get any userid they like _except_ root. If the system binaries
are owned by a non-root uid, that will lower security quite significantly.
Mike.
--
Q: What is the one true indent width?
A: 42.
Reply to: