Messages in this thread | | | Date | Sun, 30 Apr 2006 09:32:23 -0700 | From | "Joshua Hudson" <> | Subject | Re: World writable tarballs |
| |
> Isn't it just an extra ten seconds to type the 'sudo' in front of 'make > modules_install' and enter your password? I guess I totally don't get > it. No sudo. Besides, the next command after make modules_install is mount.
Besides, if it weren't the fact that the tarball has world-writable files, this would be more secure than compiling as a normal user. Instead of just hijacking some user account, they now have to do that followed by somehow getting my root password.
I disallowed password authentication for root over ssh some time ago. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |