Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Question about passwords in spells

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Arjan Bouter <a_bouter AT ezrs.com>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Question about passwords in spells
  • Date: Fri, 3 Dec 2004 04:11:02 +0100

On Thu, 2 Dec 2004 19:08:28 -0800
Andrew <afrayedknot AT thefrayedknot.armory.com> wrote:

> On Thu, Dec 02, 2004 at 08:54:28PM -0600, Chris Dombroski wrote:
> > I guess I'm just confused then, because I would think that if a program
> > was
> > run from a process owned by root that it would also have root priveledges
> > without having to be authenticated again.
> >
>
> (apparently) Pam can be configured to make you know the root password
> for things even though you are root, this is probably to make it harder
> (but not by much) for people who have exploited your system to continue
> the exploit and leave a back door via automated scripts. Although it
> seems like a trivial task to just edit the /etc/pam.d files such that
> it wont ask for a password, i guess most kiddies arent that smart :-)
> You could probably also configure pam so that some users could do certain
> things and others couldnt, and all sorts of other finer grained security
> tasks.
>
> -Andrew

hmm, casting shadow again solved this for me.
might be worth a shot...

Arjan

>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>


+=======
Source Mage GNU/Linux developer,
Linux so advanced, it may as well be magic.
http://www.sourcemage.org

Registered as user #310617 with the Linux Counter,
http://counter.li.org.
+===

Attachment: pgpUesjVQ4hZK.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page