[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [seul-edu] Alternatives to NIS




hedemark@bops.com said:
>  MAJOR security hole - anyone with any UNIX machine that has root
> access to that machine can become any NIS user without the need for a
> password.  This is one of the many reasons that I hate NIS.

Could you be more specific? Anyone with any UNIX machine that has root 
access to that machine can become _any_ user, period. 

Being able to become any user on the machine you've already cracked is 
normal. Being able to access any of that user's files on the NFS server is 
also normal - but that's an NFS problem, not NIS.


--
dwmw2