security (was Re: crontab Daemon-from-Hell)

[hjespersen at trillium.waterloo.edu]

In article <1528 at sialis.mn.org> rjg at sialis.mn.org (Robert J. Granvin) writes:

>The original points were actually correct.  But to add onto it, many
>of you will notice that / has permissions of 777.  

Not on _my_ system. Give me any valid login and a / that is 777 and
I'll have root in about 30 seconds. 

-- 
Hans Jespersen
hjespersen at trillium.water.edu
uunet!watmath!trillium!hjespersen