On Jo, 12 aug 10, 11:10:16, Arthur Machlas wrote: > > Isn't there a risk in granting user access to src, adm, and such if > ever your user account is compromised? My uninformed opinion is that > it's a question of relative risk; the 'risk' involved in building > kernels as root, versus the risk involved in giving access to these > dirs and tools should your account become compromised. If that user account is used to gain root privileges then it doesn't really matter, it's not very difficult to trick the user to give out the root password (something like a fake 'su' or 'sudo' prompt). Regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
Attachment:
signature.asc
Description: Digital signature