Bill Jonas on Wed, 18 Apr 2001 22:30:21 -0400 |
On Wed, Apr 18, 2001 at 03:32:36PM -0400, Mental wrote: > Sloppy. Bad habit to get into. Right up there with xhost +localhost. I > hope you dont write code like that. This is not /dev/mem, /dev/hd*, /dev/kmem, or /dev/s[cd]*. What's an intruder going to do, play an mp3 at me? At worst, 'cat /dev/random >/dev/audio'. I grant you, it's not best practice, but several times at work, when I've mentioned something like a local root exploit, the response I heard was, "So? I've got a single-user machine. And I've got nothing important on here. Besides, if I get broken into, I'll just reinstall." Including from you. :) But yes, the proper solution is mode 660 with group ownership being 'audio' or something like that. What I did was if you're lazy and don't care if intruders make random sounds come out of your speakers. :) -- Bill Jonas * bill@billjonas.com * http://www.billjonas.com/ "As we enjoy great advantages from the inventions of others, we should be glad of an opportunity to serve others by any invention of ours; and this we should do freely and generously." -- Benjamin Franklin ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|