Re: bin ownership problem
Perry E. Metzger (perry@imsi.com)
Thu, 19 May 1994 07:21:04 -0400
Brian Parent says:
> Ok, I'll expose my ignorance and ask, what is the specific vulnerability
> of bin owned files? I understand how it is a problem on NFS exported
> files to insecure hosts, but what is the risk for files/dirs on a locally
> non-exported file system? What about groups, is bin a bad group also?
1) Someday, your file system might end up being exported.
2) On many systems, breaking bin is easier than breaking root.
Perry