Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Two ways to possibly close an ARDAgent security hole' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Two ways to possibly close an ARDAgent security hole
Authored by: mbroughtn on Jun 21, '08 07:58:54AM

The one problem with this solution is that Reparing Permissions will change the permissions back to -rwsr-xr-x. The security problem is there again. This will be the case with any solutions that involve changing permissions.



[ Reply to This | # ]
Two ways to possibly close an ARDAgent security hole
Authored by: V.K. on Jun 26, '08 09:28:20PM
you are right but this can be dealt with by locking the file after removing the s-bit: sudo chflags uchg /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent

[ Reply to This | # ]