devil-linux-develop

[Devil-linux-develop] group names

[Heiko Z. <he...@zu...>]

Hi,

while setting the file permissions I saw the need to define several groups.

The question is how to name them.

SuSE uses "trusted" (commands like su), "shadow" (shadow password programs), "dialout" (do we need this?) , "tty" (we shouldn't need this).

What do you think about this group names, should we just use the same?

We can also go and say we use the group "root" for this programs.

cu
  Heiko

Re: [Devil-linux-develop] group names

[Friedrich L. <fl...@fl...>]

Heiko Zuerker wrote:
> 
> while setting the file permissions I saw the need to define several groups.
> 
> The question is how to name them.
> 
> SuSE uses "trusted" (commands like su), "shadow" (shadow password programs),
> "dialout" (do we need this?) , "tty" (we shouldn't need this).
> 
> What do you think about this group names, should we just use the same?
> 
> We can also go and say we use the group "root" for this programs.

Why not use the /etc/permissions.paranoid file from SuSE?

-- 
MfG / Regards
Friedrich Lobenstock

Re: [Devil-linux-develop] group names

[Heiko Z. <he...@zu...>]

On Wed, 02 Jan 2002 23:49:12 +0100
"Friedrich Lobenstock" <fl...@fl...> wrote:
> Why not use the /etc/permissions.paranoid file from SuSE?

I started with a combination of the permissions.secure and permissions.paranoid file, whereby I tried to use the most secure  but usable settings.

The current version is in CVS and you can already take a look at it.

For some programs it would be the best, to control the access to them over a group.

Should we just adopt the SuSE names or should we do something else?

cu
  Heiko

Re: [Devil-linux-develop] group names

[Heiko Z. <hz...@pr...>]

Hi,

after a night sleep, I think it's the best to go for paranoid settings, 
because we're on a firewall/router/gateway, which is not an ordinary host.
E.g. nothing is allowed for a normal user, except of using the command 
"su" when he is in the group trusted.

Everything has to be done as the root user.
Do you agree?



-- 

cu
  Heiko

http://www.devil-linux.org