Re: Help with local security checks

Renaud Deraison <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
On Sun, Aug 22, 2004 at 02:02:07PM -0400, George Theall wrote:
> On Sun, Aug 22, 2004 at 02:17:35PM +0200, Renaud Deraison wrote:
> 
> > Because if you can change the configuration file, then you are root. If
> > you are root, you can already execute commands with super-user
> > privileges. 
> 
> Not everyone managing a Nessus server will have full root authority; no
> doubt some will supposedly be constrained by sudo and the like. 

Ah - I understand your point now. I can include a ./configure option
to disable this option, that should be easy enough.


				-- Renaud
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.