<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

Firewall Wizards: Re: chroot useful?

Re: chroot useful?

From: Andreas Siegert <afx_at_ibm.de>
Date: Tue, 11 Nov 1997 11:37:57 +0100

Quoting Joseph S. D. Yao (jsdy_at_cospo.osis.gov):
> And DON'T let them bring in their own fun little binaries.

If you run a system that supports a TCB shell, that can be secured as well.
Only allow the execution of programs that have the tcb bit set, then they can
ftp binaries as much as they want, they will not be able to execute them....

bye
afx

-- 
Andreas Siegert       afx_at_ibm.de / afx_at_barolo.munich.de.ibm.com / AFX at IPNET
PGP Key:http://www.muc.de/~afx/pubkey.asc, KeyId AB26FD05

Received on Nov 12 1997

This message: [ Message body ]
Next message: Andreas Siegert: "Facts, not Fiction"
Previous message: Bennett Todd: "Denial Of Service: is it a security issue? (was Re: Ant...)"
In reply to: Joseph S. D. Yao: "Re: chroot useful?"
Next in thread: chuck+fwwiz_at_yerkes.com: "Re: chroot useful?"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]

edgeos