[COMP] Re: File Permissions

Would encrypting it with something like gpg
do the trick?

--
Mark


----- Original Message -----
#From: Michael V. Franklin <slavo@xxxxxxxxxxxx>
To: <computers@xxxxxxxxxxxxxx>
Sent: Saturday, July 22, 2000 5:17 PM
Subject: [COMP] Re: File Permissions


> Thanks John,
>
> All I'm really interested in is keeping the administrator/super user from
> viewing the file.  If he/she could delete it, I don't care.
>
> Mike
>
>  -----Original Message-----
> From: computers-bounce@xxxxxxxxxxxxxx
> [mailto:computers-bounce@xxxxxxxxxxxxxx]  On Behalf Of John Madden
> Sent: Saturday, July 22, 2000 4:55 PM
> To: computers@xxxxxxxxxxxxxx
> Subject: [COMP] Re: File Permissions
>
> On Sat, 22 Jul 2000, you wrote:
> > Is there a way to secure a file in Linux/Unix or WinNT that will deny
> access
> > by the super user or administrator?
>
> You want to *deny* access to root? :)
>
> The only way to do it is at the kernel level, with a set of kernel
patches.
> I
> forget the name of the project that had done this, but I'm pretty sure I
saw
> it
> on freshmeat.net, so I guess you should just start there...
>
> The problem here is that you not only have to protect those files, but
you'd
> have to protect the ability of that admin to make a new kernel and boot
with
> it, or to reboot the machine with a bootdisk, etc.  You'd be much better
off
> by just not giving this particular person root.  If he can't be trusted
with
> a
> particular file, he shouldn't be root. :)  Use things like 'sudo' to give
> him
> more fine-grained administrative privileges.
>
> John
>
>
> --
> # John Madden  weez@xxxxxxxxxxxxxx ICQ: 2EB9EA
> # Sys-Admin / Webmaster, Avenir Web: http://avenir.dhs.org
> # LANdb: Network Admin Database - http://avenir.dhs.org/landb/
> # NCPweb: Web-based frontend to ncpfs - http://avenir.dhs.org/ncpweb/
> # Linux, Apache, Perl and C: All the best things in life are free!
>
> ========================================
> Avenir Web's Computers Mailing List
>
> List Modes, Subscription, and General Info:
> Go to http://avenir.dhs.org/mailing.html
> List Archives: http://avenir.dhs.org/archives/
> Administrative Contact: weez@xxxxxxxxxxxxxx
>
> Get computer help: http://avenir.dhs.org
> ========================================
>
>
> ========================================
> Avenir Web's Computers Mailing List
>
> List Modes, Subscription, and General Info:
> Go to http://avenir.dhs.org/mailing.html
> List Archives: http://avenir.dhs.org/archives/
> Administrative Contact: weez@xxxxxxxxxxxxxx
>
> Get computer help: http://avenir.dhs.org
> ========================================
>


========================================
Avenir Web's Computers Mailing List

List Modes, Subscription, and General Info:
Go to http://avenir.dhs.org/mailing.html
List Archives: http://avenir.dhs.org/archives/
Administrative Contact: weez@xxxxxxxxxxxxxx

Get computer help: http://avenir.dhs.org
========================================

Other related posts: