Does anything in Linux work *well* 1563
On Sat, 5 Mar 2005 13:34:38 -0800, Jim Richardson
On Sat, 5 Mar 2005 23:54:54 -0800, Jim Richardson Actually, they are. At least on Windows (I don't know how ACL's are implemented under Linux, but I would hope...
No, i'm not. There's more than one way to add or remove a user.
Of course not every distro uses the same add-deluser scripts, but even if we buttume that every one in existence does correctly remove a user from all groups when deleted that won't prevent many other kinds of errors, for example:
* restoring an older version of the group file in which the user still is listed
Grug All nonsenses. I'm listening to music through my Stereo with Xmms. Even when the music sounds the events of KDE are mixed with the music, it's called "arts". That's...
* removing the user manually from theetc-pbuttwd file but forgetting (or missing an entry) in the group file
* an administrator writing their own script to add-remove users and forgets the group file
* mistyping a name in a group file that either doesn't exist (but might in the future) or does exist now (giving a user access to files they shouldn't)
etc.. etc..
Given that I didn't say anything about the deluser script, and there are other ways to remove the user, my point still stands.
UGO permissions simply aren't "better" security than ACL's, though they are certainly simpler in simple cases, though ACL's act just like UGO when you only add owners and groups.
Does anything in Linux work *well* 1564
Linux Advocacy from Newsgroups