Re: [Security-Discuss] 2006 su problem

On October 18, 2005 07:09, AAW wrote:
> On Tuesday, October 18, 2005 5:20am, Anne Wilson wrote:
> > On Tuesday 18 Oct 2005 11:14, Mario R. Pizzolanti wrote:
> > > What security level are you using?
> >
> > Standard, as I always have done before.  I've never tried higher levels
> > because people seem to get into all sorts of problems if they don't
> > know enough about configuring it.
> >
> > Anne
>
> Level 3 (Higher) isn't bad. That's what I used before creating my own
> level.local file. It's 4 and 5 that cause the problems. If you want to
> know what each level entails look at /usr/share/msec/{level,perm}.[0-5]
> plus man mseclib for details. The documentation
> in /usr/share/doc/msec-<version>/ isn't always up to date.
>
> Good Luck,
> Arn
>
> PS - Let me know off-list if you'd like a copy of my level.local file. It
> has all the mseclib comments and is more conveniently organized than the
> man page.

FWIW, I've used Higher since 10.0 Community (now on 10.1 Official; putting off 
the upgrade, because with all my customizations, it's going to be painful, 
but that's another topic), and the only problem I've run into is that only 
root can write to the windoze partition (and that doesn't bother me much, 
because I avoid windoze as much as possible). 

I think most of the problems are because people try to customize permissions 
or other security related things without being aware that msec is going to 
flip it back on them. If they took the time to make the changes in msec, I 
don't think they would have these problems. At least that's what I've 
observed.

-- 
Ron
ronhd at users dot sourceforge dot net

Opinions expressed here are all mine.

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________