bin owning files

[News administrator]

In article <566 at comdesign.CDI.COM> pst at comdesign.cdi.com (Paul Traina) writes:
>	I'd like bin to own system executables,  but I'm worried about
>	the fact that /bin is covered by /etc/hosts.equiv, so if a user
>	su'ed to bin on one machine, he could rlogin/rsh to another machine
>	and change anything owned by bin. 

I haven't tried this, but the manual says that the user's .rhosts file is
read BEFORE rhosts.equiv.  So you should be able to put a .rhosts in
bin's home directory, and configure it to deny rlogin/rsh to all hosts.
This should override the general permissions in hosts.equiv.

Dan Messinger
dan at ernie.rosemount.com