Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Locking down ssh config in large env

from [Greg Wooledge] Network Security [Permanent Link]
Subject: Re: Locking down ssh config in large env
Date: Fri, 24 Sep 2004 07:53:11 -0400 
On Tue, Sep 21, 2004 at 11:08:45AM -0700, Robert Hajime Lanning wrote:

Actually if the .ssh directory is owned by root (and everything in it)
with the user not having
write access to it, the user cannot delete the .ssh directory. 


But if the user owns her own $HOME, she can rename the .ssh directory
to something else, then create a new .ssh directory with contents of
her choice.  (Yes, even if root owns .ssh.)


Directories cannot be deleted
unless they are empty.  You cannot delete a file unless you can write
to the directory.
This is implemented in the filesystem driver to keep filesystem consistancy.


Correct, but not useful in this case, unless you're willing to take
away users' ownerships of their own $HOME dirs.  And if you do that,
then they aren't really full-fledged users any more
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  PubkeyAuthentication for Specific User Only, Richard R
Next by Date:  Re: Locking down ssh config in large env, Atro Tossavainen
Previous by Thread:  Re: Locking down ssh config in large env, Derek Martin
Next by Thread:  Re: Locking down ssh config in large env, Atro Tossavainen
Indexes:  [Date] [Thread] [Top] [All Lists]