Re: plog

[Jim Foltz <aa204@acorn.net>]

On Thu, Jan 14, 1999 at 10:08:15PM +0000, ktb wrote:
> Ben Collins wrote:
> 
> I looked at the file  /var/log/ppp.log  itself  as a regular user  using  "cat"  and
> found my password there.  So if I don't have to use plog as root do I have a security
> problem?  I'm confused.
> Thanks,
> Kent

I found this to be true. The ppp.log is readable by any user on a newly
installed hamm system. I think one of the scripts in cron.weekly set its
permissions to the adm group. If you don't happen to run your machine
24/7, you are unlikey to ever notice, unless you have your machine booted
up on when cron.weekly is run.

> 
> 
> -- 
> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
> 

-- 
Jim Foltz <aa204@acorn.net>
--purge \*, let dpkg sort them out
AOL/IM: jim foltz