OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Phil Martinez (philjriver.com)
Date: Thu May 02 2002 - 15:20:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    ----- Original Message -----
    From: "Matus Hrusovsky" <matusmathew.sk>
    To: <discussmandrakesecure.net>
    Sent: Thursday, May 02, 2002 10:19 AM
    Subject: [discuss] msec and directory priv

    > Hi!
    >
    > Is anywhere explained how msec control directory privileges ?
    >
    > My problem is like this:
    > Directoies in home before msec:
    > 755 /home/dir1
    > 700 /home/user1
    >
    > and afte msec checks:
    > 700 /home/dir1
    > 700 /home/user1
    >
    > How to make msec to disable changing privileges to 700 in homes dirs ?
    > I have some special dirs in /home (like vpopmail etc.) from which other
    > programs need to read some files, such as configs etc.
    >
    > Is it possible to exclude some dirs from msec privileges check ?
    >
    > msec is set to 4 (server).
    >
    > Thanks.
    >
    > Matus
    >
    >
    >
    > For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
    > message to discuss-unsubscribemandrakesecure.net. To visit
    MandrakeSecure,
    > go to http://www.mandrakesecure.net/.
    >
    >
    Hi Matus,

    I tried setting my security on a Mandrake 8.2 install to "HIGHER" (level 4)
    and i couldn't do much of anything. programs wouldn't run, i could log in
    initially after installing the system, but after logging out, i could never
    log in again. The system of course at that level won't allow root logins,
    and my "wheel" user was somehow locked out. I found it unbearable to work
    with, so i had to reinstall using simply the "high" setting.

    I wish there was better documentation on this portion of the install, the
    extra inherent security is great, but i need to be able to log in.

    Phil Maritnez

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
    message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure,
    go to http://www.mandrakesecure.net/.