[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Follow up question...
|
From: |
xystrus |
|
Subject: |
Re: Follow up question... |
|
Date: |
Thu, 4 Apr 2002 20:07:43 -0500 |
|
User-agent: |
Mutt/1.3.27i |
On Thu, Apr 04, 2002 at 04:39:19PM -0800, Jeff Bailey wrote:
> On one particular system, I'm looking at three different PAM
> configurations.
Ucky! Well, you definitely don't want to provide this facility on the
command line if your users can run it SUID. Putting it in a config file
(and then checking the ownership is root and not writable by non-root users)
is the way to go in that case.
But then, I wouldn't make the binary SUID anyway.
Xy