OS X 10.7.1: dscl

最近...

yebo blog: Mac OS X Lionはパスワードクラックが簡単
http://yebo-blog.blogspot.com/2011/09/mac-os-x-lion.html

Change the Password in Mac OS X 10.7 Lion Without Knowing the Current Password
http://osxdaily.com/2011/09/19/change-password-mac-os-x-10-7-lion-without-knowing-current-password/

このような話題を目にしてげげと思っていたところ、

Quick Fix to Prevent dscl Unauthorized Password Changes in OS X Lion
http://osxdaily.com/2011/09/21/quick-fix-to-prevent-dscl-unauthorized-password-changes-in-os-x-lion/

His reasoning is that chmod 100 is too restrictive in that it changes the command to execute only, where as before the root user could read, write, and execute.

# ものすごい意訳。
# 彼の方法(chmod 100)ではとても制限があるので...。root user が読み書き読み書き実行できるよう。