GNU, security, and RMS

[Johan Vromans]

> From: mike at thor.acc.stolaf.edu (Mike Haertel)
> As for my beliefs on the subject:
> 
> (1) Anyone who thinks a UNIX-compatible system can be `secure' has
>     some serious delusions.  Timing windows and covert channels abound.

Agreed. This could need some improvements.

> (2) There should not be security among the users of a computer system.
>     [...]   (I agree that in some situations it is reasonable
>     to have security to keep out outsiders, though.)

Agreed.

>     The principal use I have seen security put to has been the self-
>     aggrandizement of system administrators at the expense of the
>     user community.

One of the reasons for security is to protect users against
themselves. On most of the systems we run most users know how to
become root if they want or need to. But when you're super user, you
have to be extremely careful not to mistake or to mistype. 

I am not afraid that any other user will deliberately mistreat my
data, I'm just afraid of accidents. And humans make mistakes, you know.

> Mike Haertel <mike at stolaf.edu>

Johan Vromans <jv at mh.nl>

--
Johan Vromans			 jv at mh.nl via european backbone (mcvax)
Multihouse Automatisering bv		uucp: ..!{mcvax,hp4nl}!mh.nl!jv
Doesburgweg 7					  phone: +31 1820 62944
2803 PL Gouda - The Netherlands			    fax: +31 1820 62500