Re: etc/passwd file

From:
Date: 10/26/02


Date: Fri, 25 Oct 2002 23:08:45 -0700


tina wrote:
>
> why is the /etc/passwd file not hidden
> to make the system more secure?

Knowing the users on the system will only be a risk if other users are
allowed to enter into other user's directories and view files that might
contain sensitive information. If you remove those type of risks, all it
contains it a list of users on the system. Provided you have reasonable
security implemented on the system, just seeing who else is there
doesn't pose any risk. If you are open to those other issues, people
seeing the passwd file is probably the least of your worries.

-- 
Regards,
Robert McGregor - Email: admin@(remove)2host.com. Phone: 530-941-0690
Server admin, support & programing for shared & dedicated web servers
Secure, reliable hosting you expect and deserve! http://www.2host.com



Relevant Pages

  • More food for thought
    ... Basic Risk Analysis ... I have taken a position that the professional security community in general ... has and will continue to fail because they are operating under the same ... storing those backups safely offsite in a secure location on a daily basis. ...
    (comp.security.misc)
  • More food for thought
    ... Basic Risk Analysis ... I have taken a position that the professional security community in general ... has and will continue to fail because they are operating under the same ... storing those backups safely offsite in a secure location on a daily basis. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: [fw-wiz] VPN endpoints
    ... >> So, unless you like no encryption, VPNs are not secure (although some ... > A system is secure when the cost of an unauthorised entity accessing the ... Risk is inherent in information of any value, ... network and management function that the client exists within. ...
    (Firewall-Wizards)
  • Re: File encryption software?
    ... a passPRHASE is a very secure but easy to remember technique. ... Many applications still have an anachronistic limit on password length but PW Safe ... the downside risk is great. ... lived for 50+ years without needing the gun that I carry. ...
    (rec.outdoors.rv-travel)
  • Re: Network Hacking
    ... respect the rights of others, or else you risk getting your rights taken ... You don't have to hack into live computers to learn how to secure ...
    (microsoft.public.win2000.security)