i don't know, honestly.  you might try commenting that out, see
what happens.  also, perhaps run msec to change the security to a
lower level and see what results you get.  either allows for a
quick recovery if necessary, i would think.


--- Original Message ---
From: [EMAIL PROTECTED] (Katherine Richmond)
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: [newbie] Why file privileges changing?

>The cron.hourly directory has a pointer to the msec daemon(msec ->
>/usr/sbin/msec). If we remove the pointer, would that cause
security problems?
>
>Kathy
>
>
>
>--- [EMAIL PROTECTED] wrote:
>i've seen the same problem.  no answer, but i'm thinking it's one
>of the deamons associated with security
>levels/permissions/authorizations.  possibly msec, since it does
>run a cron job if installed and running.  check "ps ax | grep
>msec" as root to verify.
>
>
>--- Original Message ---
>From: [EMAIL PROTECTED] (Katherine Richmond)
>To: [EMAIL PROTECTED]
>Subject: Re: [newbie] Why file privileges changing?
>
>>No, all we have to do is wait about 30 - 45 minutes and it
>changes back to
>>drwxr-xr-x (automatically?)
>>
>>Kathy
>>
>>
>>
>>
>>--- [EMAIL PROTECTED] wrote:
>>Have you started and stopped ftp or any service that uses
>>that directory recently?
>>> Hi Everyone,
>>> 
>>> What would be causing the file privileges for "group" and
>"world" to change
>>on
>>> a directory?  For example, the security on /home/ftp_data
>changed from
>>> "drwxrwxrwx" to "drwxr-xr-x" even though no one did a "chmod"
>(or anything
>>> else) to that directory.
>>> 
>>> Here are the steps that were taken for this directory.  Note:
>We need "write"
>>> privileges for "world" since we are FTP'ing some data into
>this file from a
>>CGI
>>> script.
>>> 
>>> 1. Log on as "root"
>>> 2. cd /home
>>> 3. chmod 777 ftp_data
>>> 4. "ls -l" shows: drwxrwxrwx    2 root     root         4096
>Oct 17 10:07
>>> ftp_data/
>>> 5. Ran the CGI script that ftp's data into "ftp_data".
>>> 6. After CGI script finishes, did  "ls -l ftp_data"
>>> -rw-r--r--    1 apache   apache       4281 Oct 18 14:20
>31789_372474.dat
>>> -rw-r--r--    1 apache   apache       4281 Oct 17 09:37
>34389_372474.dat
>>> -rw-r--r--    1 apache   apache       4281 Oct 17 10:07
>85592_372474.dat
>>> 7. Then did "ls -l" from "/home" directory
>>> drwxrwxrwx    2 root     root         4096 Oct 18 14:20 ftp_data/
>>> 
>>> So, at this point we are able to see that we allowed "rwx" to
>"all", were
>>able
>>> run a CGI script that wrote data into the "ftp_data"
>directory, and then
>>showed
>>> that the  "ftp_data" directory did not change it's privileges
>after the CGI
>>> script had finished.
>>> 
>>> 7. About 30 minutes later, did another "ls -l" from "/home"
>and got the
>>> following:
>>> drwxr-xr-x    2 root     root         4096 Oct 18 14:20 ftp_data/
>>> which shows that "group" and "world" have their "write"
>privileges turned
>>off.
>>> Note: We did not log off from "root" during this time.
>>> 
>>> We do not have any "cron" jobs running, so we cannot think of
>any reason why
>>> the security on this directory keeps changing.
>>> 
>>> As an FYI, we have another server running where we had made
>this same exact
>>> security change on "/home/ftp_data", and it has never changed
>it's settings.
>>> 
>>> 
>>> Thank you,
>>> Kathy
>>--- end of quote ---
>>
>>
>
>



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to