On 24.09-14:28, Luke Bakken wrote:

[ ... ]

quoted text
> Intelligent sysadmins know every setuid binary on their system.

> Unintelligent ones get owned.

you'll forgive me if this does not sound "intelligent" to me.  a

consiencous sysadmin looks at the requirements and picks the best

tools to match.  in the vast majority of cases best results can be

achieved with simplicity and an intelligent use of basic tools.

complex policy systems have diminising returns but there is no question

that they bring additional tools to the toolkit.