Path: utzoo!utgpu!watmath!watdragon!trillium!hjespersen From: hjespersen@trillium.waterloo.edu Newsgroups: unix-pc.general Subject: security (was Re: crontab Daemon-from-Hell) Message-ID: <14270@watdragon.waterloo.edu> Date: 4 Jun 89 16:56:10 GMT References: <19071@cup.portal.com> <14373@bfmny0.UUCP> <1526@sialis.mn.org> <1528@sialis.mn.org> Sender: daemon@watdragon.waterloo.edu Reply-To: hjespersen@trillium.waterloo.edu () Organization: U. of Waterloo, Ontario Lines: 12 In article <1528@sialis.mn.org> rjg@sialis.mn.org (Robert J. Granvin) writes: >The original points were actually correct. But to add onto it, many >of you will notice that / has permissions of 777. Not on _my_ system. Give me any valid login and a / that is 777 and I'll have root in about 30 seconds. -- Hans Jespersen hjespersen@trillium.water.edu uunet!watmath!trillium!hjespersen