On Wed, 02 Jun 2004 14:30:54 -0700 Wes wrote:
WH> >>>>> On Thu, 27 May 2004 09:15:17 -0400, cnelson said:
WH> 
WH> cnelson> What are the expected or correct ownership and mode for
WH> cnelson> /usr/share/snmp?  /var/net-snmp/?
WH> 
WH> root.  To do otherwise would let anyone run arbitrary code as the same
WH> person that ran the agent (typically root).

Wes answered the first part, and the second part should be obvious. The file
should only be writable by root. Whether or not it's readable by all is up to
you. If you want your community string setup or other info private, then don't
allow group/world access.

Safest:      root:root  600

Safe:        root:wheel 660 (using wheel to allow sudo access to file)

Mostly safe: root:root 644

Bad idea:    root:root 666


-- 
Robert Story; NET-SNMP Junkie <http://www.net-snmp.org/>
<irc://irc.freenode.net/#net-snmp>  
Archive: <http://sourceforge.net/mailarchive/forum.php?forum=net-snmp-users>

You are lost in a twisty maze of little standards, all different. 


-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
>From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to