svn commit: r41757 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers

[Warren Block]

On Tue, 28 May 2013, Warner Losh wrote:

>
> On May 28, 2013, at 6:30 PM, Warren Block wrote:
>
>> On Tue, 28 May 2013, Benjamin Kaduk wrote:
>>
>>> On Mon, 27 May 2013, Tom Rhodes wrote:
>>>
>>>> Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml
>>>> ==============================================================================
>>>> --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Mon May 27 20:33:31 2013	(r41756)
>>>> +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Mon May 27 20:48:10 2013	(r41757)
>>
>>>> +	      NIS maps</emphasis>.  These users and passwords should
>>>> +	    not be propagating to all machines.  Especially if these
>>>
>>> propagating vs. propagated is an interesting question, here.
>>
>> The "should not" is unclear.  Does it mean
>>
>>  * "it is not supposed to happen, but sometimes does anyway"
>>  * "it is undesirable from a security standpoint"
>
> You shouldn't do it (it == add them to the NIS master password file) because it is a security problem if you do.

Right.  This is another situation where the imperative is better.  Don't 
tell them they shouldn't do it, just tell them *don't* do it, and why:

   Do not propagate these users and passwords to all machines...

   because the sky will open and vast clouds of devious, parachuted
   weasels will fall upon your ancestral lands, each with sharp teeth,
   claws, a bitter attitude, and a score to settle, most having failed in
   business school, or, in a few cases, the fast food industry.