SearchOpenSource: Easing SLES 10 Administration from the Command Line
Feb 14, 2007, 07:00 (0 Talkback[s])
(Other stories by MiMi Yeh)
[ Thanks to Jane Walker for this link.
]
"When setting up advanced group permissions using SUID
and SGID, can you recommend some best practices and things to
avoid?
"Sander van Vugt: Advanced permissions can be
very useful, but very dangerous as well. Let's talk about SUID,
first. This permission is meant to be used on executable program
files only when strictly necessary. In my opinion, it is better not
to use them at all. They can provide an excellent backdoor for a
hacker if used not in the right way..."
Complete Story
Related Stories:
