Re: crontab security under openpkg

2003-01-14 Thread Michael Schloh von Bennewitz
On Tue, Jan 14, 2003, Ralf S. Engelschall wrote: On Mon, Jan 13, 2003, Bill Campbell wrote: I understand that. My suggestion pertained more to the documentation than the implementation on the grounds that the names are familiar to Unix admins and developers. Yes, you're right, the

Re: crontab security under openpkg

2003-01-14 Thread Bill Campbell
On Tue, Jan 14, 2003 at 12:39:08PM +0100, Michael Schloh von Bennewitz wrote: On Tue, Jan 14, 2003, Ralf S. Engelschall wrote: On Mon, Jan 13, 2003, Bill Campbell wrote: I understand that. My suggestion pertained more to the documentation than the implementation on the grounds that the names

Re: crontab security under openpkg

2003-01-13 Thread Ralf S. Engelschall
In article [EMAIL PROTECTED] you wrote: Have I done something wrong, or missing something? It seems to me to be a majority security hole in a system when crontab executes the %{l_prefix}/etc/rc scripts as root, and that script can then execute other programs with root priviledges where the

Re: crontab security under openpkg

2003-01-13 Thread Bill Campbell
On Mon, Jan 13, 2003 at 05:16:58PM +0100, Ralf S. Engelschall wrote: ... The general issue with the four user/group ids in OpenPKG I've now tried to document at http://www.openpkg.org/faq.html#uid-security The situation you mention is correct: someone with management user/group (owner of your

Re: crontab security under openpkg

2003-01-13 Thread Bill Campbell
On Tue, Jan 14, 2003 at 06:59:10AM +0100, Ralf S. Engelschall wrote: On Mon, Jan 13, 2003, Bill Campbell wrote: [...] May I suggest that this would be a bit clearer with some more meaningful names, and roles. I'm still not absolutely clear about the use of the opkg-n user. opkgThis

crontab security under openpkg

2003-01-12 Thread Bill Campbell
Have I done something wrong, or missing something? It seems to me to be a majority security hole in a system when crontab executes the %{l_prefix}/etc/rc scripts as root, and that script can then execute other programs with root priviledges where the rc script and package scripts are writeable by