[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Bug,- Security Risk, or May Bad?



On Tue, Mar 28, 2000 at 09:30:46AM -0600, Sonny Kupka wrote:
> I use the www.domain.com/siteadmin to add the users. This is why I am 
> confused as to why a domain that has no Telnet rights and an Admin with no 
> Telnet rights can create accounts like that.

This could be changed with an additional check in the UI scripts;
however, it *is* the traditional thing to do that an administrator
or someone with su/sudo/runas permissions can add a user with
any shell they choose.

-- 
Robert G. Fisher		     NEOCOM Microspecialists Inc. 
System Administrator/Programmer      (540) 666-9533 x 116