OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Lars Hansson (lars_at_unet.net.ph)
Date: Wed Oct 02 2002 - 01:24:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Oct 02, 2002 at 08:10:13AM +0200, Marc Balmer wrote:
    > Editing the plain configuration file should not be allowed for the
    > untrained user,

    One could argue that the untrained user has no business performing
    those tasks to begin with.

    >so I consider a GUI or a shell as a security feature as it
    > prevents
    > the user from entering non-working configuration data, IMHO.

    No it does not. It might prevent them from entering /invalid/ data
    but that's not the same as non-working data. 

    ---
Lars Hansson