Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What would be the security disadvantages of a single administrator checking every file permission in a network of computers? Obviously this is a theoretical question.

I'm thinking that the fact that one entity has control over every file in the system would mean that:

a) The administrator could accidentally or purposely cause harm to important files.

b) A malicious entity could gain access to the administrators account and cause significant damage to the whole system

Is there anything else I should consider? I need to think about this in terms of likelihood or extent of damage caused by an attack.

Thanks

share|improve this question
    
Can you clarify your question. Are you talking about giving root/Administrator access to someone who doesn't already have it? Or are you talking about admin access in general? Any type of admin usually has the ability to do all sorts of system changes. –  Eric G Sep 13 '13 at 2:52
add comment

1 Answer

If the task assigned to the staff member is simply to check file permissions not modify them, then a copy of the file system's access control table could be given to the staff member by a more trusted administrator. The staff member could then review the file permissions, independently of the actual access control list. NTFS for example. Directory listing tools and scripts could provide the same information.

If an untrusted staff member needs the root privileges for modification, installation or other activities; I can think of two precautions off-hand:

  • Backup the computer before giving them access. Revoke access after the work is complete, and then compare the computer against its backup to see what exactly was changed.
  • Route all console commands through audit logging proxy box that the staff member does not have access to. This way at least the staff member can't pretend they didn't run various suspicious commands. Limited to monitoring non-interactive tools, unless the proxy machine also video logs all screen display and audio.
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.