Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.5: Be aware of a multiple user screen lock issue' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Be aware of a multiple user screen lock issue
Authored by: stewarsh on Dec 27, '07 09:53:47AM

Why change the password at all? As an admin I can have full access to any file you own.

Also with a single command I can become that user without having to know that user's password. Now since OS X is not X11, I'm not certain I can start a GUI session, but I can do anything else I want.

Remember that an admin(aka root-like) on a UNIX machine can pretty much do anything they want.



[ Reply to This | # ]
10.5: Be aware of a multiple user screen lock issue
Authored by: stewarsh on Dec 27, '07 10:00:20AM

Please note, that the above does not apply to a file-vault account since the data there is kept in an encrypted DMG file and cannot be mounted without the right key.



[ Reply to This | # ]