tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: unsafe file permissions on /usr/bin/login



I cannot brute force su if I am not in the wheel group.

I can brute force login regardless of group affiliation.

On Wed, Nov 28, 2018 at 1:05 PM Manuel Bouyer <bouyer%antioche.eu.org@localhost> wrote:
On Wed, Nov 28, 2018 at 12:40:25PM -0500, JP wrote:
> I see brute-force potential

No more than with su.

--
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--


Home | Main Index | Thread Index | Old Index