NFS UID bug.

casperfwi.uva.nl

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Tim DiLauro: "DEC OSF/1 Enhanced Security passwd problem"
• Previous message: Gene Spafford: "Tripwire V1.2 Release (Finally!)"

There seems to be some confusion about the NFS UID bug.

Here are some facts about this bug that are worth knowing:

	- Solaris 2.x (any system with 32 bit uids) is not susceptible
	- The NFS jumbo patch for SunOS 4.1.x *does* fix the UID bug

	- nfsbug will report *false* positives on the UID bug on filesystems
	  that:
		- are exported with root access on 16 bit machines
		  (side effect of truncating uids to least significant 16 bits)
	 	  Keep your uids < 60000
 	    or
		- have a world writable root directory.

Casper

• Next message: Tim DiLauro: "DEC OSF/1 Enhanced Security passwd problem"
• Previous message: Gene Spafford: "Tripwire V1.2 Release (Finally!)"