On Tue, Jan 08, 2002 at 09:57:38AM -0700, ellipse wrote:
> I'm guessing the concept behind removing editors is essentially
> to make compromising the system more of an investment in time,

Nope; once an attacker is to the point of running an editor, they have
long-ago beat you. Game over. Reinstall. Whether or not they have a
fancy text editor is immaterial. Recall several days ago, when I said
any decent Unix admin could tell you dozens of ways to edit files, and
this list has supplied those dozens -- including a lot of methods that
are built into the shells.

I strongly suggest looking elsewhere to gain security. Removing editors
isn't it.

-- 
"In God we trust, all others we monitor."
 -- NSA, Intercept Operators's motto, 1970

Attachment: msg00119/pgp00000.pgp
Description: PGP signature

Reply via email to