| Date | Tue, 8 Dec 1998 01:33:20 +0000 ( ) | From | Henrik Olsen <> | Subject | Re: Linux login security approaches |
| |
<long letter about protecting against a trojaned login snipped>
You have a fundamental flaw in your assumptions, since you don't take into account the fact that unless the security of the system is very badly messed up already, if a user is able to substitute his own program for the normal login/getty, he can also exchange his programs for whatevery else you add to give better "security".
<asbestos> The reason why people said your suggestion was the "NT way", is that it makes life harder to everyone trying to use the system, without adding to the actual security of the system. </asbestos>
-- Henrik Olsen, Dawn Solutions I/S URL=http://www.iaeste.dk/~henrik/ Get the rest there.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
|