• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Security
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security


  • Subject: Re: Security
  • From: Paul Scott <email@hidden>
  • Date: Fri, 18 Sep 2009 14:21:25 -0700

Unfortunately, I'm not near my Mac computer and forgot to turn screen sharing on after I installed SL, so I can't give the exact wording, but if you use select the drive in Finder and press CMD-I there's a little check-box in the resulting window that disables ownership on the drive. Perhaps that is checked. Just a thought.

Paul

Luther Fuller wrote:
My scripting activities lead me to looking into which users can open a sparsebundle created by another user. While doing this, I noticed something I don't think I like.

I have two startup disks: 10.6.1 on my internal HD and 10.5.8 on an external FW HD.

1. A standard user on the 10.5.8 external HD can read the Home folder of any standard (but not admin) user on the 10.6.1 internal HD.

2. A standard user on the 10.6.1 internal HD can read the Home folder of any user (including admin) on the 10.5.8 external drive.

Apparently, if I wanted to snoop, I could carry around an external 10.6.1 FW startup drive and see things you wouldn't want me to see.

Do you see a bug here?

_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:

Archives: http://lists.apple.com/archives/applescript-users

This email sent to email@hidden

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users

This email sent to email@hidden

  • Follow-Ups:
    • Re: Security
      • From: Luther Fuller <email@hidden>
References: 
 >Security (From: Luther Fuller <email@hidden>)

  • Prev by Date: Re: cron/Launchd Editor
  • Next by Date: Re: cron/Launchd Editor
  • Previous by thread: Security
  • Next by thread: Re: Security
  • Index(es):
    • Date
    • Thread