On Sat, 2006-02-18 at 02:24 +0200, Oleg Goldshmidt wrote:
> Omer Zak <[EMAIL PROTECTED]> writes:
>
> > users can be prevented from changing home page,
>
> Out of curiosity: what exactly does this contribute to workstation
> security?
It does not contribute to workstation security per se, but makes it more
difficult for clueless users to shoot their feet.
Typically, they have a workstation already configured and set up to help
them do their specific job duties (such as getting orders by phone and
entering them into the computer).
So, if they mess around with the workstation's configuration, and the
mess interferes with their workflow, they would need the sysadmin to
straighten things out. A busy and wise sysadmin would prevent such
occurrences by locking down configurations, which could cause problems.
There is also the issue of defense against malicious employees, who
still are not cracker type hackers.
> Another thing I just did out of curiosity was to check permissions on
> various files in the default Firefox profile on my home computer. I do
> not use Firefox normally, but I probably started it once or twice. I
> certainly did not play with the permissions consciously.
Good idea.
> Now, does the following look overly permissive to anyone else, or am I
> too paranoid? Why should anyone but the owner have *any* kind of
> access to any of the files below? Why on earth does the bookmarks file
> have world execute (or read, for that matter) access?
[... details were snipped ...]
I have vanilla Debian Sarge installation of Mozilla 1.7.8 (from
1.7.8-1sarge3) and FireFox 1.0.4 (from 1.0.4-2sarge5).
The mozilla and firefox files are in ~/.mozilla, which has 700
permissions. Most of the files inside the directory and its
subdirectories have 644 permissions (owner rw, group+world r).
However, when a directory is protected, then the files inside it are
protected as well. You did not tell us what are the directory
permissions in your installation.
--- Omer
--
MS-Windows is the Pal-Kal of the PC world.
My own blog is at http://tddpirate.livejournal.com/
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
