moko running everything as root
Joerg Reisenweber
joerg at openmoko.org
Sun Jun 15 16:39:34 CEST 2008
Am So 15. Juni 2008 schrieb Mikael Lammentausta:
> > User "John" running sudo rm -rf /* is better than root running "rm -rf
> > /*" because...?
>
> Because sudo can be configured to accept users in certain groups to
> run certain commands with or without a password. "rm" can be
> restricted, whereas "opkg" can be permitted without password.
>
> IMO, running everything as root introduces a whole world of possible
> exploitations without any real benefits.
YEP, exactly. Really wonder whether ssh is open to GPRS :-o (I had to fire up
GPRS to check, my simcard doesn't allow right now. shame on me :-/ )
For sure it's no good idea to run the web-browser as root.
/jOERG
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
Url : http://lists.openmoko.org/pipermail/community/attachments/20080615/681b4fdc/attachment.pgp
More information about the community
mailing list