David, On 2005-11-12 David LeBlanc wrote: > A comment about another post in the thread - if you think localsystem > access to anything is an issue, I'd suggest you think through it > further. Localsystem has the right to take ownership of anything, has > backup and restore rights, and even if you took all that away, it > would have the right to put it back. If you can't trust localsystem, > you can't trust that computer, period.
you seem to have missed the point here. The problem at hand is not the SYSTEM account itself, but services running as SYSTEM. If such a service gets exploited, the attacker will have total control of the box, *because* SYSTEM has maximum privileges. Thus it usually is a better practice to run services under their own account with just as much privileges as they really need. Regards Ansgar Wiechers -- "Another option [for defragmentation] is to back up your important files, erase the hard disk, then reinstall Mac OS X and your backed up files." --http://docs.info.apple.com/article.html?artnum=25668 --------------------------------------------------------------------------- ---------------------------------------------------------------------------
