Public SourceMage Discussion List

[Eric Sandall <eric AT sandall.us>]

Quoting Arjan Bouter <abouter AT sourcemage.org>:
<snip>
> with the security part i was talking about profile.d
> the root account must be functional at all times for a box to work reliable.
> It would be quite annoying when a file in profile.d would do
> something like
>       alias ls='rm -rf /'
> that would definately be bad for root to run and hard to avoid unless you
> like to check the installed files of every spell you cast...
> having root *not* use profile.d by default just adds one more safety 
> measure.
>
> About /sbin being in the default PATH, most linux users are keen to try out
> stuff. Is there a good reason to put sbin in their path to point to
> executables
> which their not supposed/allowed to run anyway?
>
> Note that this is all just IMHO, it's fine with me if we leave it as it is 
> at
> the moment, I'll just make a profile for root myself ;)

I believe root shouldn't be parsing profile.d and we should probably have a 
bug
filed to have that fixed.

-sandalle

--
Eric Sandall                     |  Source Mage GNU/Linux Developer
eric AT sandall.us PGP: 0xA8EFDD61  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.