Re: again security proposal

Dale Amon as Operator (root@starbase1.gpl.net)
Mon, 29 Dec 97 21:20:41 GMT


You wrote:
> 'chown -R user /home/user' is something an administrator
> should NOT do. It is an anti-security measure to give away

How would you handle it then, if you move a user from one
system to another? There is even the possibility that they
had a different user name, let alone uid on the old system.
If you bring in a tree of many thousands of files, just
how *are* you going to sort out their problem? And remember,
you can only spend about 2 minutes on it because you've
a back log of other things that have to be done *right now*...

> symmetrical. A file can even have zero links, in case a
> process holds it open after unlinking it.

This in fact is used in the berkeley mailer code.