[cobalt-users] security risk... is this normal?

[Greg Hewitt-Long <cobaltusers@xxxxxxxxxxxxxxxxxxx>]

I've just found what I think is a potential problem - the uninstaller files 
found in:

/var/lib/cobalt/uninstallers

most of them are permissioned as 755 and owner root, group root.  although 
most rpm installs as root should not rpm -e as another user, there are the 
potential for open permissioned folders and files to be removed if an 
unauthorized SSH/telnet enabled user were to attempt to run one/more of 
these files.... any thoughts?

regards

Greg Hewitt-Long

ps - I noticed that a third-party installation of phpMyAdmin from NuOnce 
was CORRECTLY set as 700 and root/root owner/group - thereby removing the 
possibility that a non-permissioned user could cause any problem.