[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Re: cobalt-security digest, Vol 1 #797 - 1 msg
- Subject: Re: [cobalt-security] Re: cobalt-security digest, Vol 1 #797 - 1 msg
- From: Jeff Lasman <jblists@xxxxxxxxxxxxx>
- Date: Tue, 11 Jun 2002 10:09:38 -0700
- Organization: nobaloney.net
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
"A2ZUniforms.com" wrote:
> I was horrified to see that his username had all the same privileges as
> admin!
Are you sure? Did you look to see if the username can read files that
are set so only admin can read them? Did you check to see if the
usnername could su into root?
This certainly isn't true on any Sun Cobalt set up to factory
specifications that I've ever seen.
If it's true for you, you should find the problem and fix it; Linux
permissions are actually quite easy to understand. Just get a good
linux administration book, find out what you might have done to cause
this, and undo it.
Jeff
--
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net, P. O. Box 52672, Riverside, CA 92517
voice: +1 909 778-9980 * fax: +1 909 548-9484