Re: Linux login security approaches

Henrik Olsen (henrik@iaeste.dk)
Tue, 8 Dec 1998 01:33:20 +0000 ( )


<long letter about protecting against a trojaned login snipped>

You have a fundamental flaw in your assumptions, since you don't take into
account the fact that unless the security of the system is very badly
messed up already, if a user is able to substitute his own program for
the normal login/getty, he can also exchange his programs for whatevery
else you add to give better "security".

<asbestos>
The reason why people said your suggestion was the "NT way", is that it
makes life harder to everyone trying to use the system, without adding to
the actual security of the system.
</asbestos>

-- 
Henrik Olsen,  Dawn Solutions I/S
URL=http://www.iaeste.dk/~henrik/
Get the rest there.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/