[BL] Regarding multi-user setup in BL3.40
baslinux at lists.ibiblio.org
baslinux at lists.ibiblio.org
Sun Mar 18 20:05:03 EDT 2007
On Mon, 19 Mar 2007 baslinux at lists.ibiblio.org wrote:
> Message from Steven
> ===================
> Sindi wrote:
>>
>> I am setting up BL3 for friends to use online with Opera.
>> I have never had problems with security as root, but
>> running as user makes it even more secure.
>
> Not if you make all executables, devices and directories
> writeable by non-root users. A non-root account is more
> secure is because it is limited in what it can do. When
> you remove those limits, you remove the security.
Thanks. I will only make executable or read/write by user the files
actually needed by a particular user to dial, run X and rxvt, and use
Opera. suid Xvesa and eznet.
>
>> Opera is supposedly rather buggy.
>
> Says who? I use Opera often (without java, flash, etc.)
> and it works fine. However, it's a different story with
> the Opera plugins -- I recommend not using them.
Opera is said to have security bugs involving buffer overruns.
Not that I have ever had any problems with it in that regard.
I will wait for the beta 3.50 before fixing libX problems.
Sindi
> Cheers,
> Steven
>
More information about the BasLinux
mailing list