Re: SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Alvin Oga
hi christopher... anytime someone has physical access to the machine... you already have a security problem ( my definition ) i am not sure that you can get physical access as root from the options shown in /etc/auto.misc but if oyu are correctwow...wonder how many people tried it...

Re: SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Alvin Oga
hi christopher... anytime someone has physical access to the machine... you already have a security problem ( my definition ) i am not sure that you can get physical access as root from the options shown in /etc/auto.misc but if oyu are correctwow...wonder how many people tried it..

Re: SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Adam Heath
severity 66556 normal thanks On Fri, 30 Jun 2000, Christopher W. Curtis wrote: [ snipped 'sploit ] I do not consider this a problem. If you have console access to a machine, you can do much more damage than creating trojan floppys. Please search the list archives for discussions about mbr, and

SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Christopher W. Curtis
I'm obviously doing something wrong ... I've written to the maintainer of the autofs package according to the page summary listed under 'packages' from the website, and as I also saw somewhere else (dpkg -s listing?). I filed a bug report against autofs and marked it as release critical. I have

Re: SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Adam Heath
severity 66556 normal thanks On Fri, 30 Jun 2000, Christopher W. Curtis wrote: [ snipped 'sploit ] I do not consider this a problem. If you have console access to a machine, you can do much more damage than creating trojan floppys. Please search the list archives for discussions about mbr, an

SECURITY PROBLEM: autofs [all versions]

2000-06-30 Thread Christopher W. Curtis
I'm obviously doing something wrong ... I've written to the maintainer of the autofs package according to the page summary listed under 'packages' from the website, and as I also saw somewhere else (dpkg -s listing?). I filed a bug report against autofs and marked it as release critical. I have