RE: secure file permissions

2003-12-08 Thread Domonkos Czinke
PROTECTED] Subject: Re: secure file permissions On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access

Re: secure file permissions

2003-12-08 Thread Russell Coker
On Mon, 8 Dec 2003 19:16, Domonkos Czinke [EMAIL PROTECTED] wrote: I recommend using the chattr program. You should set them immutable chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow. Man chattr. In a stock Linux kernel the permissions required to chattr -i a file are exactly the

Re: secure file permissions

2003-12-08 Thread Phillip Hofmeister
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 08 Dec 2003 at 03:16:05AM -0500, Domonkos Czinke wrote: Hi, I recommend using the chattr program. You should set them immutable chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow. Man chattr. Setting /etc/shadow +i would not be

RE: secure file permissions

2003-12-08 Thread Domonkos Czinke
-security@lists.debian.org Subject: Re: secure file permissions On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem

Re: secure file permissions

2003-12-08 Thread Russell Coker
On Mon, 8 Dec 2003 19:16, Domonkos Czinke [EMAIL PROTECTED] wrote: I recommend using the chattr program. You should set them immutable chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow. Man chattr. In a stock Linux kernel the permissions required to chattr -i a file are exactly the

Re: secure file permissions

2003-12-08 Thread Phillip Hofmeister
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 08 Dec 2003 at 03:16:05AM -0500, Domonkos Czinke wrote: Hi, I recommend using the chattr program. You should set them immutable chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow. Man chattr. Setting /etc/shadow +i would not be

Re: secure file permissions

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? You want to

Re: secure file permissions

2003-12-07 Thread Tim Nicholas
mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) $ ls -l /etc/passwd

Re: secure file permissions

2003-12-07 Thread Horst Pflugstaedt
On Sun, Dec 07, 2003 at 09:27:04AM +0100, mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? %--(6)--$ ls -l /etc/passwd -rw-r--r--1 root root 1276 17. Sep 22:57 /etc/passwd I restricted them to rw for root only, but some

Re: secure file permissions

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? They are both 644 by default. I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ?

Re: secure file permissions

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? You want to

Re: secure file permissions

2003-12-07 Thread Horst Pflugstaedt
On Sun, Dec 07, 2003 at 09:27:04AM +0100, mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? %--(6)--$ ls -l /etc/passwd -rw-r--r--1 root root 1276 17. Sep 22:57 /etc/passwd I restricted them to rw for root only, but some

Re: secure file permissions

2003-12-07 Thread Tim Nicholas
mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) $ ls -l /etc/passwd

Re: secure file permissions

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? They are both 644 by default. I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ?