Re: World writable tarballs

Isn't it just an extra ten seconds to type the 'sudo' in front of 'make
modules_install' and enter your password? I guess I totally don't get
it.
No sudo.
Besides, the next command after make modules_install is mount.

Besides, if it weren't the fact that the tarball has world-writable files, this
would be more secure than compiling as a normal user. Instead of just
hijacking some user account, they now have to do that followed by
somehow getting my root password.

I disallowed password authentication for root over ssh some time ago.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Re: Remove Root Password from Shadow file
    ... > I forgot my root password for my Linux. ... mount / -o remount,rw ... necessarily work, so we use the mount command to put the root ...
    (comp.os.linux.setup)
  • Re: Remove Root Password from Shadow file
    ... > I forgot my root password for my Linux. ... mount / -o remount,rw ... necessarily work, so we use the mount command to put the root ...
    (comp.os.linux.misc)
  • Re: Remove Root Password from Shadow file
    ... > I forgot my root password for my Linux. ... mount / -o remount,rw ... necessarily work, so we use the mount command to put the root ...
    (comp.os.linux)
  • Re: [SLE] 9.1 NFS server wont allow RW mounts
    ... > Try doing this same command, as a normal user. ... /etc/exports, making the mount RO for all users, root included. ... Please read the FAQs: suse-linux-e-faq@suse.com ...
    (SuSE)
  • Re: Any known reason why su would not work?
    ... If you're worried that someone has your root password now, ... and the command had no ... > hacker and called su, and that had just read my ... > I didn't find any obvious evidence of a hacker, ...
    (comp.os.linux.security)