[Mimedefang]localsocketname/var/spool/MIMEDefang/mimedefang.sock'unsafe

John Nemeth jnemeth at victoria.tc.ca
Fri Jun 10 21:59:36 EDT 2005


On Oct 31,  7:27pm, "Mack" wrote:
}
} } WTF is that doing with those permissions?  That's the source of your
} 
}      This "WTF" is kinda rude.
} 
} lol well it's more kinda funny, since personally i run the os with no
} access to any other user bar root. and if any other user is on the box then
} i've got a lot more to worry about than what they can do with the box lol
} since they are all in a DMZ anyway. Personally I prefer to run everything
} with all permissions as it saves a lot of hassle and time, and well if the
} box was to get compromised then regardless of what permissions i have on
} files, root access will not be far away for them i'm sure.

     This is rather silly.  Using proper permissions protects against
you making a mistake (of course, if you always run as root, then that's
a moot point), and it protects against coding errors in applications.
It's true that getting onto a box is a significant part of the way to
getting root, but that doesn't mean you should instruct your butler to
give a grand master key and the combination to the safe to an
intruder.  Proper administration is not a hassle.  It saves the system
and your butt.

} Does everybody still run unix as a multi user system with lots of users ?

     Yes.

}-- End of excerpt from "Mack"



More information about the MIMEDefang mailing list