|
|
There was a mention on slashdot a couple days ago talking about how "sudo -s" doesn't get logged at all and provides you with a nice root shell on OSX.
Anyone here able to take a few minutes and check how this functions under ubuntu?
On 3/22/06, John Richard Moser <nigelenki@xxxxxxxxxxx> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jan Claeys wrote:
> Op wo, 22-03-2006 te 01:38 -0500, schreef John Richard Moser:
>> Similarly, the synaptic-apt-dpkg stack could be modified to take
>> --jradmin to mean that ONLY signed packages could be used; ONLY the
>> repositories given can supply packages; repositories CANNOT be
>> modified; and the GPG keys CANNOT be changed. This would allow for
>> software installation and removal without opening a hole re 'dpkg -i
>> baseutils_upgrade_with_rootkit.deb'.
>
> This reminds me about something I have been thinking about for some time
> now: I think (something like) apt & dpkg doesn't/shouldn't really *need*
> root privileges, except for some limited number of system packages?
>
You definitely want root access on package management. Otherwise users
can remove other users' packages; install trojans and viruses; etc.
>
- --
All content of all messages exchanged herein are left in the
Public Domain, unless otherwise explicitly stated.
Creative brains are a valuable, limited resource. They shouldn't be
wasted on re-inventing the wheel when there are so many fascinating
new problems waiting out there.
-- Eric Steven Raymond
We will enslave their women, eat their children and rape their
cattle!
-- Evil alien overlord from Blasto
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2
(GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQIVAwUBRCGEgAs1xW0HCTEFAQKpuQ/+I/IbhY0YUgg6g6ywX/TWJsJKy0X+AzMO
dW4D05qcCbAIUlqwze6xTTIWeabkvqCcpDoGgHrrap/rp7RRZH4U1cobvY4cABit
+6yV9/GnRb5dbupNiPJxHwnuXh1VLVLyjJb86phUx8bTsVoUfOv/N/iNY2QN7gfU
Y4dvvmmzepj4G+d2B97HjkkTrEJawmfjRbG8a/8UiT5oB1nqqs0gaS23M3NFhsIA
J+lCLv/qG9h2bnMR1tzYUeEHZa56TOgCcBDRskkpFamaYEVwc+kP0MgOPPY8BrLZ
iYWe9jqLn+uUAD2zUk/+ZbUx0V0ZuNJ2P2rGU6VpNHlYjyTJuyweZmDjhkFLBIKR
LxHvw1eRwRanFdTiACUuAo2ZiU/ewQ/332SV2kEA9c1aAj/GpPdm1WfDlG+0N7kU
EayA48FHOSqXnhL9KV+NFIHFwks5bJSfksBAiiYaTM1Xy7s4iKTzdq32soMCe861
uf4a0pZFw5OWtEf5f2C1TdV2QGz8eV5YPix4kwghgGdAjTMT0MH8NYFZP1/8klNb
Fc+EQ3PTGmnpLgCvml+17vcpwkh5mZbjmmRRXiHoOgFR0iW4GNPVu0gpEgBTHmwo
/dfSI63dtOc6wq6LC04ioz8Cx+WUxNLXzdzuQJV/SRZzZZbb3SYsn2Tw9Q2yg1MF
nHkRMhbTqDk=
=Trrs
-----END PGP SIGNATURE-----
--
ubuntu-devel mailing list
ubuntu-devel@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
--
ubuntu-devel mailing list
ubuntu-devel@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
|
|