Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Question about passwords in spells

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Paul Mahon <dufflebunk AT dufflebunk.homeip.net>
  • To: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] Question about passwords in spells
  • Date: Thu, 02 Dec 2004 23:13:33 -0500

PAM can do some very interesting things, such as be configured to not
need a password at all if you have a gpg key on a usb drive plugged in.

On Thu, 2004-02-12 at 19:08 -0800, Andrew wrote:
> On Thu, Dec 02, 2004 at 08:54:28PM -0600, Chris Dombroski wrote:
> > I guess I'm just confused then, because I would think that if a program
> > was run from a
> > process owned by root that it would also have root priveledges without
> > having to be
> > authenticated again.
> >
>
> (apparently) Pam can be configured to make you know the root password
> for things even though you are root, this is probably to make it harder
> (but not by much) for people who have exploited your system to continue
> the exploit and leave a back door via automated scripts. Although it
> seems like a trivial task to just edit the /etc/pam.d files such that
> it wont ask for a password, i guess most kiddies arent that smart :-)
> You could probably also configure pam so that some users could do certain
> things and others couldnt, and all sorts of other finer grained security
> tasks.
>
> -Andrew
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>

Attachment: signature.asc
Description: This is a digitally signed message part




Archive powered by MHonArc 2.6.24.

Top of Page