OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1995: Re: Various Solaris 2.3 file permission problems

Re: Various Solaris 2.3 file permission problems

Calum Mackay (calum.mackaymrc-bsu.cam.ac.uk)
Wed, 4 Jan 1995 09:33:36 GMT 

Here's an update on these problems as they relate to Solaris 2.4...

> Problems: 1. As distributed, /opt/SUNWdxlib contains many _world_ writeable
>               files, including executables.

Fixed.

> 2. By default, /var/nis/{hostname}.dict is _world_ writeable.

Unknown. We do not run NIS+.

> 3. /etc/hostname.le0 is _world_ writeable.

NOT fixed.

> 4. /var/statmon, /var/statmon/sm, and /var/statmon/sm.bak are
>               _world_ writeable directories.

NOT fixed.

>            5. The following files are _world_ writeable:
>                 /var/adm/vold.log

NOT fixed.

>                 /var/log/syslog*

Fixed.

>                 /var/lp/logs/lpsched
>                 /var/lp/logs/lpNet

NOT fixed.

>                 /etc/mnttab

NOT fixed.

>                 /etc/path_to_inst.old

Fixed.

>                 /var/saf/_log

NOT fixed.

>                 /etc/rmtab

NOT fixed.


How very reassuring...

Best regards,
Calum.

----
Calum D. Mackay                      Telephone:                  01223 330378
System Manager                       International:           +44 1223 330378

Institute of Public Health (BSU)
University of Cambridge 
University Forvie Site               
Robinson Way
Cambridge CB2 2SR.                      email: calum.mackaymrc-bsu.cam.ac.uk
ENGLAND.				alternative:          cdm12cam.ac.uk