LDAP admin tools
Bill Campbell
linux-sxs
Thu Sep 27 16:21:59 PDT 2007
On Wed, Sep 26, 2007, Collins Richey wrote:
>On 9/26/07, Matthew Carpenter <mcarpenter at intelguardians.com> wrote:
>
>> Thanks for the tip. I have been using Webmin for years for this, but it's
>> good to have a couple different hammers.
>>
>
>>From various reports and from a local exploit in the past few days,
>with Webmin you've got your thumb under the hammer. Most folks
>consider Webmin the best way on Linux to become owned.
I'll see your webmin, and raise usermin.
Even constrained to the local LAN, webmin, as shipped, has some
``interesting'' bugs such as not checking user's home directories. I've
had somebody set a user's directory to /home, realized they made a mistake,
move the directory, and *EVERYTHING* under /home ended up under
/home/someusername. If they had tried deleting the user, it would have
happily done an ``rm -rf /home''.
Bill
--
INTERNET: bill at celestial.com Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way
FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676
Virtually everything is under federal control nowadays except the
federal budget.
-- Herman E. Talmadge, 1975
More information about the Linux-users
mailing list