[geeks] Selling points

[Greg A. Woods]

[ On Friday, April 26, 2002 at 15:18:45 (-0400), Brian Hechinger wrote: ]
> Subject: Re: [geeks] Selling points
>
> On Fri, Apr 26, 2002 at 02:26:17PM -0500, Bill Bradford wrote:
> > 
> > Screw that, we dont even give them sudo.  If they need something done
> > that their user-level account cant do, they come to an admin.
> 
> nah, if their app needs to start as root to bind to port 25 (for example) then
> i put the app's stuff in sudo and they can start and stop their app to their
> hearts content, and don't have to bother me with such trivial things.

then the app is broken and needs fixing!  ;-)

Seriously, sudo (and its ilk) is a security bug waiting for an exploit
(as has recently been discussed on the netbsd lists....  ;-)

-- 
								Greg A. Woods

+1 416 218-0098;  <gwoods at acm.org>;  <g.a.woods at ieee.org>;  <woods at robohack.ca>
Planix, Inc. <woods at planix.com>; VE3TCP; Secrets of the Weird <woods at weird.com>