Tag Info

New answers tagged


It is difficult for someone to tell you if a particular resource is adequately protected as it depends on the value of the files stored on the server as well as many other factors. I am assuming that you are using WPA/WPA2-PSK, which is what most small businesses usually use. Every employee connects to the wireless network using the same password. The risk ...


The reason a software author would use suid/guid is because some program features require root access. Take for example ping utility. In order to do all that ICMP communication, a raw socket is needed. Opening a raw socket requires root privileges. So, the program is build as a suid/guid binary, it starts by opening the raw socket, and immediately after that ...


It is not the bits themselves that are insecure, but if an attacker was able to exploit a flaw in a setuid/setgid binary it would result in code execution under elevated privileges. So by reducing the number or binaries (and lines of code) that run with elevated privileges you are reducing the attack surface.


This doesn't jump out at me as a security risk. Sensitive data is stored in databases all the time. If your database is somehow compromised, I suspect that client directory structures getting out would be pretty low on your list of concerns.

Top 50 recent answers are included