Lists

Open Menu Close Menu

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

Re: crontab and rsync in Sierra Era

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: crontab and rsync in Sierra Era

Subject: Re: crontab and rsync in Sierra Era
From: Brandon Allbery <email@hidden>
Date: Tue, 28 Feb 2017 07:32:36 -0500

On Tue, Feb 28, 2017 at 5:07 AM, René J.V. Bertin <email@hidden> wrote:

On Monday February 27 2017 12:00:26 email@hidden.com wrote:
>...or maybe they "just" need "a dozen" years of work. Darwin isn't Linux;
>SIP isn't SElinux: things don't carry over.

With Apple's resources you'd hope it wouldn't take them a dozen years...

SElinux is just a variant of a known and relatively well understood technology (ruleset-based labeled mandatory access control). Apple took a different and I think rather less well understood path; they may well be blazing new trails in security... which is tricky even with well understood tech. And "well understood", in the context of security, isn't very; for everything known, there's a huge area of shadows and thick fog explored so far only by the black hats (including the likes of NSA), and not very far even by them.

> If you really need to pass through such envvars, just don't use a system
> shell.

Like installing a shell through MacPorts or similar and setting that as your login shell? Won't such shells have limited permissions because they haven't been ratified officially?

Oddly enough, no. You can even copy /bin/sh to a different path and run it and it will lose many of its protections (recent MacPorts trace mode even knows and uses this!). An example of what I said above. Seems an odd way to do things to me, and I'm far from being a security expert.

--

brandon s allbery kf8nh sine nomine associates

email@hidden email@hidden

unix, openafs, kerberos, infrastructure, xmonad http://sinenomine.net

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list      (email@hidden)

This email sent to email@hidden

References:
	>Re: crontab and rsync in Sierra Era (From: René J.V. Bertin <email@hidden>)

Prev by Date: Re: crontab and rsync in Sierra Era
Previous by thread: Re: crontab and rsync in Sierra Era
Next by thread: Re: X11-users Digest, Vol 14, Issue 10
Index(es):
- Date
- Thread