https://qa.mandrakesoft.com/show_bug.cgi?id=1739
Product: msec Component: msec Summary: changing CHECK_PROMISC to no in /etc/security/msec/security.conf is ineffective ! Version: 0.38-2mdk Platform: Other OS/Version: All Status: UNCONFIRMED Severity: normal Priority: P2 AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] # ls -l /etc/cron.d/msec -rw-r--r-- 1 root root 56 fév 5 10:01 /etc/cron.d/msec [root@pcpc root]# cat /etc/cron.d cron.d cron.daily [root@pcpc root]# cat /etc/cron.d/msec */1 * * * * root /usr/share/msec/promisc_check.sh [root@pcpc root]# cat /etc/security/msec/ level.local perm.local security.conf server.4 server.5 [root@pcpc root]# cat /etc/security/msec/se security.conf server.4 server.5 [root@pcpc root]# cat /etc/security/msec/security.conf TTY_WARN=no SYSLOG_WARN=no MAIL_WARN=yes MAIL_USER=root CHECK_UNOWNED=yes CHECK_SHADOW=yes CHECK_SUID_MD5=yes CHECK_SECURITY=yes CHECK_PASSWD=yes CHECK_SUID_ROOT=yes CHECK_PERMS=yes CHECK_PROMISC=yes CHECK_WRITABLE=yes CHECK_OPEN_PORT=yes CHECK_SGID=yes CHKROOTKIT_CHECK=yes RPM_CHECK=yes [root@pcpc root]# vi /etc/security/msec/security.conf [root@pcpc root]# cat /etc/security/msec/security.conf TTY_WARN=no SYSLOG_WARN=no MAIL_WARN=yes MAIL_USER=root CHECK_UNOWNED=yes CHECK_SHADOW=yes CHECK_SUID_MD5=yes CHECK_SECURITY=yes CHECK_PASSWD=yes CHECK_SUID_ROOT=yes CHECK_PERMS=yes CHECK_PROMISC=no CHECK_WRITABLE=yes CHECK_OPEN_PORT=yes CHECK_SGID=yes CHKROOTKIT_CHECK=yes RPM_CHECK=yes [root@pcpc root]# msec [root@pcpc root]# cat /etc/security/msec/security.conf TTY_WARN=no SYSLOG_WARN=no MAIL_WARN=yes MAIL_USER=root CHECK_UNOWNED=yes CHECK_SHADOW=yes CHECK_SUID_MD5=yes CHECK_SECURITY=yes CHECK_PASSWD=yes CHECK_SUID_ROOT=yes CHECK_PERMS=yes CHECK_PROMISC=no CHECK_WRITABLE=yes CHECK_OPEN_PORT=yes CHECK_SGID=yes CHKROOTKIT_CHECK=yes RPM_CHECK=yes [root@pcpc root]# cat /etc/cron.d/msec */1 * * * * root /usr/share/msec/promisc_check.sh [root@pcpc root]# ls -l /etc/cron.d/msec -rw-r--r-- 1 root root 56 fév 5 10:01 /etc/cron.d/msec [root@pcpc root]# the cron job has not been removed ! ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.