[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Rationale behind the groups "dip" and "dialout"



John Hasler wrote:

> Setuid root also makes it possible for the secrets
> files to be readable only by root, and for pppd to use the serial ports
> without the user having access to them.  Pppd drops root privileges as soon
> as it doesn't need them.

So root can give users on the system access to a PPP connection without
letting them know, what the user name and password for that account is. 
Makes sense, although it's not aplicable to my situation, because I
can't use PAP/CHAP and it wouldn't work with a chat script.

MfG Viktor
-- 
Viktor Rosenfeld
E-Mail:		mailto:rosenfel@informatik.hu-berlin.de
HertzSCHLAG:	http://www.informatik.hu-berlin.de/~rosenfel/hs/


Reply to: