Re: Slackware-7.1 Insecurity in default permission ?!?

[Ron DuFresne <dufresne () WINTERNET COM>]

here's what's listed in the MANIFEST:

drwxr-xr-x root/root         0 2000-04-04 00:20 usr/info/

-rw-r--r-- root/root      3533 1994-05-16 15:41 usr/info/dir

-rw-r--r-- root/root        18 1994-05-06 12:09 etc/shells

Mind you these are from the slackware area on sunsite, and may differ for
-current, but I think these are accurate


Thanks,

Ron DuFresne

On Fri, 22 Sep 2000, Fabio Pietrosanti (naif) wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi, i just installed a Slackware-7.1 and hardening it after a
> find / -perm -2 -type -f
> I found this two bad thing:
>
> 123655    1 -rw-rw-rw-   1 root     root          744 Sep 21 22:52
> /usr/info/dir
> 153123    1 -rw-rw-rw-   1 root     root           49 Sep 21 22:51
> /etc/shells
>
>
> Does someone may verify it on other slackware-7.1 distribution?
>
>
>
> Pietrosanti  Fabio          I.NET SpA, High Quality Access to the Internet
> e-mail:  naif () inet it              ( Direzione Tecnica, Gruppo Firewall )
>          firewall () inet it
> PGP Key (DSS)                                 http://naif.itapac.net/naif.asc
>
> Home Page URL:            http://www.inet.it
> Sede:                     Via Caldera, 21 20153 Milano
> Tel:                      02-409061 Fax: 02-40906303
>  --
> Free advertising: www.openbsd.org - Multiplatform Ultra-secure OS
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.1 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> Filter: gpg4pine 4.1 (http://azzie.robotics.net)
>
> iD8DBQE5yzrmdK5I1NnlcMYRAkk8AKDLI42FeMOQufJGueLvHnLnNtCrFwCg5D8r
> /mZO9qwXP6xbQrMi8p9ex6o=
> =Tpvw
> -----END PGP SIGNATURE-----

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.