sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
Re: [SM-Discuss] Question about passwords in spells
- From: Paul Mahon <dufflebunk AT dufflebunk.homeip.net>
- To: sm-discuss <sm-discuss AT lists.ibiblio.org>
- Subject: Re: [SM-Discuss] Question about passwords in spells
- Date: Thu, 02 Dec 2004 23:13:33 -0500
PAM can do some very interesting things, such as be configured to not
need a password at all if you have a gpg key on a usb drive plugged in.
On Thu, 2004-02-12 at 19:08 -0800, Andrew wrote:
> On Thu, Dec 02, 2004 at 08:54:28PM -0600, Chris Dombroski wrote:
> > I guess I'm just confused then, because I would think that if a program
> > was run from a
> > process owned by root that it would also have root priveledges without
> > having to be
> > authenticated again.
> >
>
> (apparently) Pam can be configured to make you know the root password
> for things even though you are root, this is probably to make it harder
> (but not by much) for people who have exploited your system to continue
> the exploit and leave a back door via automated scripts. Although it
> seems like a trivial task to just edit the /etc/pam.d files such that
> it wont ask for a password, i guess most kiddies arent that smart :-)
> You could probably also configure pam so that some users could do certain
> things and others couldnt, and all sorts of other finer grained security
> tasks.
>
> -Andrew
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>
Attachment:
signature.asc
Description: This is a digitally signed message part
-
Re: [SM-Discuss] Question about passwords in spells
, (continued)
-
Re: [SM-Discuss] Question about passwords in spells,
Chris Dombroski, 12/02/2004
- Re: [SM-Discuss] Question about passwords in spells, Andrew, 12/02/2004
- Re: [SM-Discuss] Question about passwords in spells, Arjan Bouter, 12/02/2004
- Re: [SM-Discuss] Question about passwords in spells, Eric Sandall, 12/03/2004
- Re: [SM-Discuss] Question about passwords in spells, Jackson Alley, 12/03/2004
- Re: [SM-Discuss] Question about passwords in spells, Christopher Dombroski, 12/03/2004
- Re: [SM-Discuss] Question about passwords in spells, Thomas HOUSSIN, 12/16/2004
- Re: [SM-Discuss] Question about passwords in spells, Eric Sandall, 12/16/2004
- Re: [SM-Discuss] Question about passwords in spells, Andrew, 12/16/2004
- Re: [SM-Discuss] Question about passwords in spells, Thomas HOUSSIN, 12/17/2004
-
Re: [SM-Discuss] Question about passwords in spells,
Chris Dombroski, 12/02/2004
- Re: [SM-Discuss] Question about passwords in spells, Paul Mahon, 12/02/2004
Archive powered by MHonArc 2.6.24.