-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 9 Aug 99, at 10:38, Ken Jones wrote:
> The best solution i've seen is to group all the programs
> that are possible security holes, like in.telnet and compilers,
> to a new group. And only allow members of that group to execute
> the programs.
> 
> Just like all the suid programs should be grouped.
> 
> It's a pretty standard security lockdown method.

What prevents me to upload binaries into my home 
directory/subdirectories, like ~/Maildir/tmp? (Other than carefully 
controlled ftp access?)

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2 -- QDPGP 2.60 
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBN9ac0VMwP8g7qbw/EQJTowCgk9NInMtpnVQFNT4kmh+y4s3Vxr4AnAmQ
PPbweKBWtIiLe5nGgs2ERtd4
=gyVW
-----END PGP SIGNATURE-----
--
Petr Novotny, ANTEK CS
[EMAIL PROTECTED]
http://www.antek.cz
PGP key ID: 0x3BA9BC3F
-- Don't you know there ain't no devil there's just God when he's drunk.
                                                             [Tom Waits]

Reply via email to