Mailinglist Archive: opensuse (3031 mails)

[Wolfgang Woehl <tito@xxxxxxxxxx>]

Freitag, 8. Februar 2008 Aaron Kulkis:

> You see...the whole Unix security model PRESUMED that
> a user might (either unintentionally or intentionally)
> write and/or execute a run-away process which could
> be destructive.  Write-permissions (or lack of them)
> prevent the process from doing damage to anything other
> than the user's own personal files.

Aaron, I'm taking the liberty to call your set of 
thinking "old-school" which has a positive side and a negative side.

Bad news first: Immense lack of imagination wrt to possible scenarios. 
Immense. I don't mean to sound rude but you really need to read up on 
what is going on. For example all of web2.0 is one huge stress-test 
suite for a browser infrastructure. To take this lightly is ... well, 
I've already called it names ... But don't. Why would you? Do you 
audit?

Good news: old-school tends to have all the tools ready to deal with 
the moving target "security on linux". So you stand a chance :)

As I said, I'm taking liberties and I'm sure you will shoot back at me 
(in 1 week or something -- man, you should fix your email, this is 
like a trip back in time. This thread was _over_). But no hard 
feelings, allright?

Wolfgang
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx