[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] can't su -
- Subject: Re: [cobalt-security] can't su -
- From: "Oleg Volkov" <voleg@xxxxxxxxxxxx>
- Date: Tue, 10 Sep 2002 00:12:01 +0300
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> Gerald Waugh wrote:
>
> > Correct, I should have qualified that.
>
> At least OpenBSD does work that way though.
>
> Jan Wildeboer
Look in /etc/pam.d/su file for description of issue.
For example, RedHat comes with "wheel" line commented out.
This is about Linux flavor. Every distribution
can prefer its own way. But by "default", pure and plain
Unix does not use such tricks.
May be I wrong in last sentence, because all of them
provides one or another trick to improve default behavior.
I have experience work with Solaris, HP-UX and AIX. All of them
has some extra config files/directories/databases to close
the things together.
But because none of them standard (which command standard
in Unix ? ;-), I insist that default behavior is open
access for all.
--
Oleg Volkov
System Administrator
SHUNRA Software Ltd.
http://www.shunra.com
+972-9-7643743/93121(w)
+972-51-601914(m)