diff options
Diffstat (limited to 'zarb-ml/mageia-dev/2012-September/018701.html')
| -rw-r--r-- | zarb-ml/mageia-dev/2012-September/018701.html | 97 |
1 files changed, 97 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2012-September/018701.html b/zarb-ml/mageia-dev/2012-September/018701.html new file mode 100644 index 000000000..fc1b43b06 --- /dev/null +++ b/zarb-ml/mageia-dev/2012-September/018701.html @@ -0,0 +1,97 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] halt and shutdown users: Still needed? + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3C5055FDE3.4000502%40eesti.ee%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="018700.html"> + <LINK REL="Next" HREF="018714.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] halt and shutdown users: Still needed?</H1> + <B>Sander Lepik</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3C5055FDE3.4000502%40eesti.ee%3E" + TITLE="[Mageia-dev] halt and shutdown users: Still needed?">sander.lepik at eesti.ee + </A><BR> + <I>Sun Sep 16 18:27:15 CEST 2012</I> + <P><UL> + <LI>Previous message: <A HREF="018700.html">[Mageia-dev] halt and shutdown users: Still needed? +</A></li> + <LI>Next message: <A HREF="018714.html">[Mageia-dev] halt and shutdown users: Still needed? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#18701">[ date ]</a> + <a href="thread.html#18701">[ thread ]</a> + <a href="subject.html#18701">[ subject ]</a> + <a href="author.html#18701">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>16.09.2012 19:13, <A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">rihoward1 at gmail.com</A> kirjutas: +><i> On Sep 9, 2012, at 3:10 AM, Julien wrote: +</I>><i> +</I>>><i> Le Sun, 09 Sep 2012 12:55:17 +0300, +</I>>><i> Sander Lepik <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">sander.lepik at eesti.ee</A>> a écrit : +</I>>><i> +</I>>>><i> 08.09.2012 19:49, Colin Guthrie kirjutas: +</I>>>>><i> Hi, +</I>>>>><i> +</I>>>>><i> So there exists two users (provided by default from the setup pkg) +</I>>>>><i> called "halt" and "shutdown". These users just run the halt and shutdown +</I>>>>><i> commands as their shell. This means su'ing or sudo'ing or setting a +</I>>>>><i> password and logging in as them, will shut the machine down. +</I>>>>><i> +</I>>>>><i> This seems like a relic from many years ago and there is no need to +</I>>>>><i> include such users in this day and age. Should we kill them off? +</I>>>>><i> +</I>>>>><i> Col +</I>>>>><i> +</I>>>><i> +1 on removing them. I didn't even know about them :) +</I>>>><i> +</I>>>><i> -- +</I>>>><i> Sander +</I>>>><i> +</I>>><i> The same for me, didn't know they existed. +</I>>><i> +</I>>><i> Julien +</I>><i> +</I>><i> - 1 +</I>><i> Removing them is a really bad idea. It violates fundamental security principles. +</I>><i> There is a reason processes are run with their user permissions. +</I>><i> +</I>Hmm, i'm not sure you know what you are talking about. Can you show me where in the code are +we doing that? + +-- +Sander + +</PRE> + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="018700.html">[Mageia-dev] halt and shutdown users: Still needed? +</A></li> + <LI>Next message: <A HREF="018714.html">[Mageia-dev] halt and shutdown users: Still needed? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#18701">[ date ]</a> + <a href="thread.html#18701">[ thread ]</a> + <a href="subject.html#18701">[ subject ]</a> + <a href="author.html#18701">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |