FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] identd, revisited

To: Firewall Wizards Security Mailing List <firewall-wizards@listserv.cybertrust.com>
Subject: Re: [fw-wiz] identd, revisited
From: ArkanoiD <ark@eltex.net>
Date: Sun, 4 Feb 2007 02:43:00 +0300
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.cybertrust.com
In-reply-to: <6.2.0.14.2.20070202082523.03f66550@ranum.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <20070202103727.GA18322@eltex.net> <6.2.0.14.2.20070202082523.03f66550@ranum.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
User-agent: Mutt/1.4.1i
nuqneH,

Well, why files? Just, say, a permission to talk to outer world 
via some protocol that will otherwise be granted to *all* users
of given host. Is it bad idea?

On Fri, Feb 02, 2007 at 09:39:11AM -0500, Marcus J. Ranum wrote:
> 
> One of the other things a lot of us were afraid of (fortunately) never
> came to pass -- and that was the (inevitable) use of ident as a
> permissions gate. You know, the old "if ident says that the user
> is 'mjr' then grant access to 'mjr's files!" brain damage. Given
> the level of stupid out there, a lot of us expected that to happen.
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>