Re: unsafe file permissions on /usr/bin/login
JP <[email protected]> Wed, 28 Nov 2018 13:09:19 -0500
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <CAHN8Bqqd1p53+VjBVtFQCqrNBHV0u-Eecg6ejmJWUnbKCnXaTA@mail.gmail.com> |
I cannot brute force su if I am not in the wheel group. I can brute force login regardless of group affiliation. On Wed, Nov 28, 2018 at 1:05 PM Manuel Bouyer <[email protected]> wrote: > On Wed, Nov 28, 2018 at 12:40:25PM -0500, JP wrote: > > I see brute-force potential > > No more than with su. > > -- > Manuel Bouyer <[email protected]> > NetBSD: 26 ans d'experience feront toujours la difference > -- >