Re: Internet Worm

[lailert () ucssun1 sdsu edu (Supak Lailert \)]

On Sat, 15 Oct 1994, James Seng wrote:

> Getting rid for r(sh/login/cp...) application maybe pain in the neck. 
> Enabled it may create backdoor for cracker. 
>
> Anyway, what i did on my system is put a .rhosts file in every user 
> directory. chmod 000 .rhosts and chown root .rhosts. Not all user needs 
> .rhosts file. Those who wants to use them email me and i will chown back 
> to them. (any problem with that? :-)

Uh Oh SURE! There is a problem with that! Users have write permission to 
their home directories thus they can delete you .rhosts and create their 
own as they like. If the account is cracked, the cracker can build a new 
.rhosts at no time.

Regards,
Supak Lailert

=============================================================================
Supak Lailert -- MBA (Information System) Program, San Diego State University

lailert () ucssun1 sdsu edu
lailert () aol com
=============================================================================