Lower Process Capabilities

Tom Lane tgl at redhat.com
Mon Jul 27 01:01:14 UTC 2009


Steve Grubb <sgrubb at redhat.com> writes:
> On Sunday 26 July 2009 08:38:45 pm Tom Lane wrote:
>> I trust you meant to write 0555?

> No, I really mean 005 so that root daemons are using public permissions. 

What's the point?  The most you will accomplish is to confuse people
(and perhaps programs too).  0005 is certainly not meaningfully more
secure than 0555.

			regards, tom lane




More information about the fedora-devel-list mailing list