nicketynick;194502 Wrote: 
> [EMAIL PROTECTED]:~$ ls -al /usr/share/slimserver
> total 636
> drwxr-xr-x  10 root root   4096 2007-04-09 15:31 .
> drwxr-xr-x 253 root root   8192 2007-04-09 15:31 ..
> drwxr-xr-x   2 root root   4096 2007-04-09 15:31 Firmware
> drwxr-xr-x   2 root root   4096 2007-04-09 15:31 Graphics
> drwxr-xr-x  16 root root   4096 2007-04-09 15:31 HTML
> drwxr-xr-x   2 root root   4096 2007-04-09 15:31 IR
> drwxr-xr-x   7 root root   4096 2007-04-09 15:31 lib
> drwxr-xr-x   2 root root   4096 2007-04-09 15:31 MySQL
> drwxr-xr-x  20 root root   4096 2007-04-09 15:31 Plugins
> -rw-r--r--   1 root root      5 2007-01-15 16:24 revision.txt
> drwxr-xr-x   3 root root   4096 2007-04-09 15:31 SQL
> -rw-r--r--   1 root root 594675 2007-01-15 16:24 strings.txt
> 
> Wouldn't it be the slimserver install that set the permissions? But
> maybe not, I notice that all the directory structure is owned by root,
> from usr down, anyway. It must be the way the Ubuntu install was done
> on this machine (I didn't do, so haven't a clue).
> what does nautilus do?

Normally it is a good practice to make application files owned by root
even when the slimserver runs as its own user.  This way if there is an
exploitable bug in the slimserver the attacker can not write to the
applications files.

This is why windows is hacked all the time.  Everything is easily
writeable and most people run with administrator privileges.


-- 
SuperQ
------------------------------------------------------------------------
SuperQ's Profile: http://forums.slimdevices.com/member.php?userid=2139
View this thread: http://forums.slimdevices.com/showthread.php?t=34408

_______________________________________________
unix mailing list
[EMAIL PROTECTED]
http://lists.slimdevices.com/lists/listinfo/unix

Reply via email to