Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month, online, via Jitsi Meet.

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] Dropping obsolete commands (Linux Pocket Guide)



On Wed, Nov 18, 2015 at 11:37 AM, Chuck Anderson <cra at wpi.edu> wrote:

> Those two options don't work for a regular user to change their own
> Full Name.
>

?In IT environments, even folks in Wheel shouldn't be editing their Full
Name, that's reserved for some security application.
On a family laptop, anyone who isn't allowed to run Update won't be
changing their name either.
?Maybe in a College environment you don't need to prevent a user from
changing their name without review, but the social engineering
possibilities of changing FullName of <cra at wpi.edu> to "Vice Chancellor C.
Adams" ?are such that i'd discourage allowing setuid  chfn to contain any
breaches.



-- 
Bill Ricker
bill.n1vux at gmail.com
https://www.linkedin.com/in/n1vux



BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org