Marcy Cortes wrote:
"Review and remove unnecessary accounts" "unix"
Yes, but not system accounts. Just leave them be. Honest, you're just
making work for yourself.
Google it.
Anyone security / audit weenie who *doesn't* put that in the policy is probably
in need of the beginner book or a new job.
Any audit weenie who thinks the non-login games account needs to be
removed must be working somewhere
where the illusion of accomplishment is more highly valued than real
accomplishment.
One can argue all they want with the auditors about the philosophy and
correctness of leaving them in, but in reality, the policy is still broken.
And some of us need our jobs.
Yeah, so you do silly things that don't need to be done and tend to the
actual detriment of the operation and security of your system.
"I need my job" are four of the saddest words ever spoken in the
mismanaged American corporate world.
If a few people had said, "This is BS, no matter how important the
jackass who ordered done" we probably wouldn't be in the current financial
crisis, nor in a quagmire in the Middle East.
But that takes confidence in one's own judgment, which is not a quality
highly valued nor rewarded in the corporate and governmental
purgatories to which so many of the readers of the list are condemned.
Which is why Linux came from outside your world.
--
Jack J. Woehr # «'I know what "it" means well enough, when I find
http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or
http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
