Re: suid bit files and securing FreeBSD

2003-07-26 Thread Chuck Swiger
Peter Rosa wrote: [ ... ] I'm looking for an exact list of files, which: 1. MUST have... 2. HAVE FROM BSD INSTALLATION... 3. DO NOT NEED... 4. NEVER MAY... ...the suid-bit set. Of course, it's no problem to find-out which files ALREADY HAS suid-bit set. But what files REALLY MUST have it ? The file

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Daniel Harris
Matthew Graybosch wrote: But if you're concerned with security uber alles, I'm surprised you didn't look into OpenBSD first. According to their site (openbsd.org), they've had "only one remote hole in the default install, in more than 7 years!" Caveat: the default install has almost nothing in i

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Peter Rosa
t; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, July 26, 2003 7:22 PM Subject: Re: suid bit files and securing FreeBSD > > > Second question is: Has anybody an exact wizard, how to secure > > the FreeBSD machine. Imagine the situation, the only person w

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Matthew Graybosch
> Second question is: Has anybody an exact wizard, how to secure > the FreeBSD machine. Imagine the situation, the only person who > can do anything on that machine is me, and nobody other. I have > set very restrictive firewalling, I have removed ALL tty's except > two local tty's (I need to work

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Peter Rosa
Sorry for disturbing you. This was for security mailing list and I sent it here by mistake Cheers, Peter Rosa - Original Message - From: "Peter Rosa" <[EMAIL PROTECTED]> To: "FreeBSD Questions" <[EMAIL PROTECTED]> Sent: Saturday, July 26, 2003 7:11 PM Subject: suid bit files and securin