[BL] Regarding multi-user setup in BL3.40

baslinux at lists.ibiblio.org baslinux at lists.ibiblio.org
Sun Mar 18 20:05:03 EDT 2007


On Mon, 19 Mar 2007 baslinux at lists.ibiblio.org wrote:

> Message from Steven
> ===================
> Sindi wrote:
>>
>> I am setting up BL3 for friends to use online with Opera.
>> I have never had problems with security as root, but
>> running as user makes it even more secure.
>
> Not if you make all executables, devices and directories
> writeable by non-root users.  A non-root account is more
> secure is because it is limited in what it can do.  When
> you remove those limits, you remove the security.

Thanks.  I will only make executable or read/write by user the files 
actually needed by a particular user to dial, run X and rxvt, and use 
Opera.  suid Xvesa and eznet.

>
>> Opera is supposedly rather buggy.
>
> Says who?  I use Opera often (without java, flash, etc.)
> and it works fine.  However, it's a different story with
> the Opera plugins -- I recommend not using them.

Opera is said to have security bugs involving buffer overruns.
Not that I have ever had any problems with it in that regard.

I will wait for the beta 3.50 before fixing libX problems.

Sindi

> Cheers,
> Steven
>



More information about the BasLinux mailing list