LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-22-2003, 02:27 PM   #1
Robert0380
LQ Guru
 
Registered: Apr 2002
Location: Atlanta
Distribution: Gentoo
Posts: 1,280

Rep: Reputation: 47
security opinion-program permissions


what do you think about going through the /bin /usr/local/bin
/sbin/...etc. and making certain commands to be only executable by root. like for instance the su command (i guess not a good example because i use that one often because i dont log in as root). But you get my point.

I noticed that many of the programs tell you that you have to be root to run em so it may be pointless. Any thoughts though?
 
Old 06-30-2003, 07:43 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
AFAIK there is no valid reason to do so wrt apps that need root privileges to perform certain tasks that are either already owned by root.

OTOH, taking away suid/sgid bits and using sudo to grant authorization would be a valid reason, or having dev tools like compilers in a separate group. Then again dev tools shouldn't be on servers...

Another reason would be in the "security by obscurity" category, taking away any g+o rights to mask an app being there. There are many workarounds for finding out, so that's not a valid reason and the result would only give you a false sense of security.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
security-access permissions kumary Linux - Newbie 7 12-03-2005 02:40 PM
IYO(in your opinion) Best security/vulnerability Mailing list MitchM99 Linux - Security 6 10-04-2005 11:33 PM
XFce Security/Permissions issue HenchmenResourc Linux - Software 1 02-02-2005 11:03 PM
Video Security - your opinion please byteZero Linux - Hardware 3 01-25-2004 12:31 PM
Security and Permissions Questions gauge73 Linux - Newbie 3 03-25-2003 11:15 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration