On Thu, Jan 14, 1999 at 10:08:15PM +0000, ktb wrote:
> Ben Collins wrote:
> 
> I looked at the file  /var/log/ppp.log  itself  as a regular user  using  
> "cat"  and
> found my password there.  So if I don't have to use plog as root do I have a 
> security
> problem?  I'm confused.
> Thanks,
> Kent

I found this to be true. The ppp.log is readable by any user on a newly
installed hamm system. I think one of the scripts in cron.weekly set its
permissions to the adm group. If you don't happen to run your machine
24/7, you are unlikey to ever notice, unless you have your machine booted
up on when cron.weekly is run.

> 
> 
> -- 
> Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED] < /dev/null
> 

-- 
Jim Foltz <[EMAIL PROTECTED]>
--purge \*, let dpkg sort them out
AOL/IM: jim foltz

Reply via email to