Peter C Norton <[EMAIL PROTECTED]> writes:

> Just like compiled-in uid's this doesn't provide any more security, but
> this one adds a feeling of false safety.

Less code == more security.  The amount of security gained may be
negligible but it's *always* non-zero, since the probability of bugs
existing or accidentally being introduced into the additional code down
the road either by code modifications or broken operating systems is
non-zero.

-- 
Russ Allbery ([EMAIL PROTECTED])         <URL:http://www.eyrie.org/~eagle/>

Reply via email to