Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] bash_profile and bashrc . . .

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Andrew <afrayedknot AT thefrayedknot.armory.com>
  • To: Discuss SM <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] bash_profile and bashrc . . .
  • Date: Fri, 18 Mar 2005 15:42:33 -0800

On Fri, Mar 18, 2005 at 06:37:29PM -0500, Geoffrey Derber wrote:
> On Fri, 2005-03-18 at 18:49 +0100, Arjan Bouter wrote:
>
> > This also is not a bug. This is a security measure. Root's profile
> > can/should be
> > different from that of normal users. For example root can have /sbin in
> > $PATH
> > which normal users shouldn't need and to minimize the risk of a
> > non-functional
> > root account things like bash-completion and other stuff which installs in
> > /etc/profile.d shouldn't be in root's profile. By installing a normal
> > file
> > instead of a link you make sure lazy admins don't use /etc/profile
> > instead of
> > their own.
>
> If we are considering the security risk, shouldn't the /sbin directories
> be removed from /etc/profile? In which case we'd also probably want to
> move 'gaze' to /usr/bin or something like that.

I dont think removing /sbin and /usr/sbin from /etc/profile is a security
enhancement. One of the things I like about Source Mage is we DONT do that.

-Andrew

--
__________________________________________________________________________
|Andrew D. Stitt | astitt at sourcemage.org |
|irc: afrayedknot | afrayedknot at t.armory.com |
|aim: thefrayedknot or iteratorplusplus | acedit at armory.com |
|Sorcery Team Lead | ftp://t.armory.com/ |
--------------------------------------------------------------------------

Attachment: pgpOPFmM9uR6D.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page