Re: What server hardening are you doing these days?

David,

On 2005-11-12 David LeBlanc wrote:
> A comment about another post in the thread - if you think localsystem
> access to anything is an issue, I'd suggest you think through it
> further. Localsystem has the right to take ownership of anything, has
> backup and restore rights, and even if you took all that away, it
> would have the right to put it back. If you can't trust localsystem,
> you can't trust that computer, period.

you seem to have missed the point here. The problem at hand is not the
SYSTEM account itself, but services running as SYSTEM. If such a service
gets exploited, the attacker will have total control of the box,
*because* SYSTEM has maximum privileges. Thus it usually is a better
practice to run services under their own account with just as much
privileges as they really need.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668

---------------------------------------------------------------------------
---------------------------------------------------------------------------