[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] security risk... is this normal?



On Monday 01 March 2004 11:16 am, Dmitry Alexeyev wrote:

> Only root can install rpms. Nobody else.
>
> > > rpm -e could delete any package.
> >
> > Unless run by root, rpm -e can only delete a package installed by
> > the user who installed it.
>
> You can't install a package not being the root user.
> And you can't remove anything.

Hmmmmm... testing on one of my servers; you're right.

On my desktop I can.  One day I'll look to see what I did to allow that 
to hapen.

Thanks.

Jeff
-- 
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html";