Re: [gentoo-hardened] grsec & logged users

[Drake Wyrm]

At 2004-11-17T10:22:40-0500, Casper the Friendly Ghost
<casper@×××××××××××××××××.com> wrote:
> Couldn't it be possible for grsec to have another option (restrict
> /var/run/utmp and /var/log/wtmp) ? Users don't need neither read nor
> write access (the logging done in the files is done at login).

There's an easier way to restrict read access to a file than patching
the kernel.

	chmod o-r /var/*/?tmp

-- 
Batou: Hey, Major... You ever hear of "human rights"?
Kusanagi: I understand the concept, but I've never seen it in action.
  --Ghost in the Shell