Re: Read Exec by default - RH9 - why?

2003-07-31 Thread Bill Anderson
I know this is a bit dated, but I'm just getting back to my email and had to respond to this, On Wed, 2003-07-09 at 15:07, Ed Wilts wrote: On Wed, Jul 09, 2003 at 11:31:29AM -0700, Gordon Messmer wrote: Ed Wilts wrote: You're right - there is a security hole there. For example, I don't

Re: Read Exec by default - RH9 - why?

2003-07-10 Thread Gordon Messmer
Ed Wilts wrote: On Wed, Jul 09, 2003 at 11:31:29AM -0700, Gordon Messmer wrote: Ed Wilts wrote: You're right - there is a security hole there. For example, I don't think it's a good idea that the password file is world readable since it gives information out that you may not want to share. If

RE: Read Exec by default - RH9 - why?

2003-07-09 Thread Fryclau
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gordon Messmer Sent: Wednesday, July 09, 2003 1:16 AM To: [EMAIL PROTECTED] Subject: Re: Read Exec by default - RH9 - why? Fryclau wrote: Anybody know why redhat 9 set by default reading and execution access to other users

Re: Read Exec by default - RH9 - why?

2003-07-09 Thread Ed Wilts
Of Gordon Messmer Sent: Wednesday, July 09, 2003 1:16 AM To: [EMAIL PROTECTED] Subject: Re: Read Exec by default - RH9 - why? Fryclau wrote: Anybody know why redhat 9 set by default reading and execution access to other users??? What, the system directories? ...because the shell has

Re: Read Exec by default - RH9 - why?

2003-07-09 Thread Gordon Messmer
Fryclau wrote: I'am the the root user to applying the chmod... Obviously. The system works fine, but I don't like to leave the security access of each file in the disk with R-X to other users.. When some user login without privileges he could do something like this: Cat /etc/hosts And it works

Re: Read Exec by default - RH9 - why?

2003-07-09 Thread Gordon Messmer
Ed Wilts wrote: You're right - there is a security hole there. For example, I don't think it's a good idea that the password file is world readable since it gives information out that you may not want to share. If you're using shadow password files (and you don't have any excuse not to): no, it

Re: Read Exec by default - RH9 - why?

2003-07-09 Thread Ed Wilts
On Wed, Jul 09, 2003 at 11:31:29AM -0700, Gordon Messmer wrote: Ed Wilts wrote: You're right - there is a security hole there. For example, I don't think it's a good idea that the password file is world readable since it gives information out that you may not want to share. If you're

Read Exec by default - RH9 - why?

2003-07-08 Thread Fryclau
Anybody know why redhat 9 set by default reading and execution access to other users??? Is it right applying this? cd / chmod o-r R * Does anyone know why should I leave my filesystem like this? thanks Fryclau J

Re: Read Exec by default - RH9 - why?

2003-07-08 Thread Gordon Messmer
Fryclau wrote: Anybody know why redhat 9 set by default reading and execution access to other users??? What, the system directories? ...because the shell has to be able to read the directories in order to search the PATH, and the user has to be able to x a directory in order to read or