Shawn, Exactly on the mark. Thanks.
Gary Shawn Walker wrote: > On 20/11/2007, Bart Smaalders <[EMAIL PROTECTED]> wrote: > >> Gary Gendel wrote: >> >>> Hi, >>> >>> In the current Indiana, root login (and su) is disabled. To compensate >>> the initial user is given "root" role. Isn't this like giving users the >>> keys to the store? All I have to do is "pfsh" (no password) and I've got >>> full control of just about everything. It seems to me that all we did >>> was to give the login user root capabilities at the expense of throwing >>> all security away. At least with the previous model, I had to log in >>> as root in order to do anything dangerous. >>> >>> >> This is an experiment. You're free to create additional users >> that don't have that role. How would you like to see this work? >> > > I can't speak for Gary, but I was expecting it to prompt me for my own > password. > > While being able to "pfexec whatever" is convenient; it seems like I'm > essentially just given the ability to "run as a fully-privileged user" > anytime I want. > > What stops a script from doing "pfexec bash" and then trashing my > system without me knowing? > > >>> The last thing to note (and I've mentioned this before), is that if >>> something >>> happens so the boot requests a password to go into "maintenance mode", >>> you can't log in to fix anything in the current model. Do I need to carry >>> around my LiveCD everywhere I go with my laptop? >>> >>> What is the security model we're shooting for here? >>> >>> >> sulogin is supposed to ignore root as a role.... (grabs laptop) >> .... in fact, when I just tried this (-s on the grub line to >> boot single user) it works fine. >> >> What was the problem you ran into? >> > > I suspect he ran into the same problem I did. > > If the system starts up and requests the password for maintenance mode > due to a problem (such as a mount failing, etc.) you get prompted for > the maintenance password. However, even if you enter the correct > password (for your own account), you just get the prompt again. > Hitting control-d doesn't have the expected effect either. > > This seems to be a result of making root a role instead of an account. > >
begin:vcard fn:Gary Gendel n:Gendel;Gary adr:;;;Hillsborough;NJ;08844;USA email;internet:[EMAIL PROTECTED] tel;work:908-369-0334 tel;home:908-369-5496 url:http://www.genashor.com version:2.1 end:vcard
_______________________________________________ indiana-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/indiana-discuss
