|
|
Natural can be easily cheated by the tool called fakeroot.
It can be used to change environment variable UID, which is read by Natural to set *INIT-USER variable. Natural gets UID different from user that is logged in linux and If AUTO=ON is also set, one can impersonate any user known to NSC.
The idea is that Natural should get User ID from other source than UID. Just like mail application does - even after changing UID it stil knows the original user logged to linux.
This is very important security issue.
