Re: Help with local security checks
George Theall <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
On Sun, Aug 22, 2004 at 02:17:35PM +0200, Renaud Deraison wrote: > Because if you can change the configuration file, then you are root. If > you are root, you can already execute commands with super-user > privileges. Not everyone managing a Nessus server will have full root authority; no doubt some will supposedly be constrained by sudo and the like. > There's nothing Nessus can do to lower the damages you can > do. Because signature checking can be disabled, I have to agree. George -- [email protected] _______________________________________________ Nessus-devel mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus-devel
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFBKN+fsWUciNmuHkURApnFAJ0S3GsmaaOIE6vyoIuyPfLnQqKzXgCgjFYc ZUL9A9m29j7m8/6d7xqtRmY= =w9aK -----END PGP SIGNATURE-----