Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!cornell!george From: george@cornell.UUCP (George R. Boyce) Newsgroups: comp.sys.next Subject: Re: Security and defaults. Message-ID: <28727@cornell.UUCP> Date: 9 Jun 89 15:12:03 GMT References: <4985@umd5.umd.edu> <43b721a8.19ac2@wasp.engin.umich.edu> <5169@pt.cs.cmu.edu> Reply-To: george@cornell.UUCP (George R. Boyce) Organization: Cornell Univ. CS Dept, Ithaca NY Lines: 17 NeXT, How about providing a shell script, "/etc/.i'm not a naive user.", which would turn off all the appropriate setuid bits, fix all the right file protections, turn on password protection to all the nasty things, etc. By the time a naive user found the file and figured out how to execute it, they would not be naive, right? This would allow the rest of your buyers an easy way of *finding* and "correcting" all the non-standard stuff that you have done to support the most naive of your customers. Just an idea... George, george@cs.cornell.edu P.s. hee hee... how about making it a binary with a built-in quiz and if you don't score high enough, you don't pass GO, you don't become a unix guru.