moko running everything as root

Joerg Reisenweber joerg at openmoko.org
Sun Jun 15 16:39:34 CEST 2008


Am So  15. Juni 2008 schrieb Mikael Lammentausta:
> > User "John" running sudo rm -rf /* is better than root running "rm -rf
> > /*" because...?
> 
> Because sudo can be configured to accept users in certain groups to
> run certain commands with or without a password. "rm" can be
> restricted, whereas "opkg" can be permitted without password.
> 
> IMO, running everything as root introduces a whole world of possible
> exploitations without any real benefits.

YEP, exactly. Really wonder whether ssh is open to GPRS :-o (I had to fire up 
GPRS to check, my simcard doesn't allow right now. shame on me :-/ )
For sure it's no good idea to run the web-browser as root.

/jOERG
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
Url : http://lists.openmoko.org/pipermail/community/attachments/20080615/681b4fdc/attachment.pgp 


More information about the community mailing list