OT : Omezeni prihlasovani uzivatelu

[Petr Novotny]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11 Oct 2000, at 16:29, Tibor Pittich wrote:

> Dňa 11. Oct 2000 o 16:24, Pavel Kankovsky napísal(a):
> 
> > Kdyz by se to implementovalo "idealne", tak by demon na zacatku
> > nemohl nic, akorat by mohl komunikovat s klientem a autentizacnim
> > subsystemem (ktery by stejne byl soucasti TCB, a tudiz by musel byt
> > dobre) a opravneni sahat na jakakoli data by ziskal az od toho aut.
> > subsystemu.
> 
> takto dako to robi aj popa3d od solar designera. ak sa spoji s pam
> systemom je tam dobry zaklad pre zabezpecenie danej sluzby? imho ano,
> pretoze nebezi stale pod uid 0, a v tej "autentizacnej" casti snad nie
> je co pokazit:-) dufam ze mu nedoverujem celkom slepo;)

Ale je co pokazit - viz nedavny root exploit ve vpopmailu. Predtim, 
nez nekoho autentifuckujete, uz musite (jako root) ze site nacist 
username, password a dat je do svych bufferu (oops!).

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2 -- QDPGP 2.61a
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBOeRsPFMwP8g7qbw/EQJMDwCeMHudrF6CESe7gH9uS0TXSBzObQ4AoOFD
XePVtNHQTD9xpHMynhzUpT+V
=5y0P
-----END PGP SIGNATURE-----