Security Basics mailing list archives

Re: preventing run-as option


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 11 Oct 2006 01:11:36 +0200

On 2006-10-10 Lariviere, Stephen wrote:
Disable runAs all together. It is bad unless you have an exceptional
justification for it.

You may want to elaborate on that one.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: