begin quoting Tracy R Reed as of Wed, Apr 20, 2005 at 10:06:59AM +0700: > Neil Schneider wrote: > > Linux is a multi-user system. I don't care if there's only one user > > logged in it doesn't change it into a single user system. Linux single > > is single user. No network, no X, no multi-user. Sounds like a secure > > Linux system to me! :-) > > Ah...this is a very important point which I have been missing up until > now: Linux already has predefined conventions for what is single user > and what is multi user. If you aren't in runlevel 1 it really isn't a > single user box. The security that comes with Linux is architected > around this. When you log into single user mode what uid do you always > go in as? 0! You never login as a normal user and then sudo. Which tends to reinforce the point that singler-user systems ought to (be able to) run as root.
However, the 'architected' point ties in with what they're advertising, and runs contrary to that. The security mechanism in linux, that presumably makes you safe from viruses (which I disagree), is based on a security model that presumes the multi-user configuration. So whatshisname is either correct, but the advertising is misleading, or he's wrong, and the advertising isn't (too) misleading. Either way, you get a stick to bash linspire with. And everyone's happy! [snip] > > Not in this thread, but in past arguments on this list. You have been > > adamant at times about wanting to install packages in your home > > directory, for testing. You have complained about your inability to > > use a package manager to do so. If you mount the drive noexec, then > > you can't do that. > > Ah...good point. SJS has indeed complained that install scripts had > paths hard coded into them which prevented him from installing things in > $HOME. He wanted properly relocatable rpm's etc. Yup. I did more that complain. I've ranted. But that's not really applicable here. -Stewart "I'm getting tired of this." Stremler
pgpeAb7SFuyHt.pgp
Description: PGP signature
-- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
