OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: permissions

permissions

Perry E. Metzger (perryimsi.com)
Mon, 16 May 1994 08:52:25 -0400

Steve Simmons says:
> Ob. Bug:
> 
> The System V vendor(s) who shipped both / and /etc with mode 777.

To this day, SunOS ships with horrible permissions on directories.
Directories that because of NFS vulnerabilities should be owned by
root ship owned by bin; /usr/games ships with loads of suid and sgid
programs that are potential security holes, etc. Part of the
system install proceedure at my last job was a large chmod/chown
script we ran on every machine...

Perry