https://qa.mandrakesoft.com/show_bug.cgi?id=1739
Product: msec
Component: msec
Summary: changing CHECK_PROMISC to no in
/etc/security/msec/security.conf is ineffective !
Version: 0.38-2mdk
Platform: Other
OS/Version: All
Status: UNCONFIRMED
Severity: normal
Priority: P2
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
# ls -l /etc/cron.d/msec
-rw-r--r-- 1 root root 56 fév 5 10:01 /etc/cron.d/msec
[root@pcpc root]# cat /etc/cron.d
cron.d cron.daily
[root@pcpc root]# cat /etc/cron.d/msec
*/1 * * * * root /usr/share/msec/promisc_check.sh
[root@pcpc root]# cat /etc/security/msec/
level.local perm.local security.conf server.4 server.5
[root@pcpc root]# cat /etc/security/msec/se
security.conf server.4 server.5
[root@pcpc root]# cat /etc/security/msec/security.conf
TTY_WARN=no
SYSLOG_WARN=no
MAIL_WARN=yes
MAIL_USER=root
CHECK_UNOWNED=yes
CHECK_SHADOW=yes
CHECK_SUID_MD5=yes
CHECK_SECURITY=yes
CHECK_PASSWD=yes
CHECK_SUID_ROOT=yes
CHECK_PERMS=yes
CHECK_PROMISC=yes
CHECK_WRITABLE=yes
CHECK_OPEN_PORT=yes
CHECK_SGID=yes
CHKROOTKIT_CHECK=yes
RPM_CHECK=yes
[root@pcpc root]# vi /etc/security/msec/security.conf
[root@pcpc root]# cat /etc/security/msec/security.conf
TTY_WARN=no
SYSLOG_WARN=no
MAIL_WARN=yes
MAIL_USER=root
CHECK_UNOWNED=yes
CHECK_SHADOW=yes
CHECK_SUID_MD5=yes
CHECK_SECURITY=yes
CHECK_PASSWD=yes
CHECK_SUID_ROOT=yes
CHECK_PERMS=yes
CHECK_PROMISC=no
CHECK_WRITABLE=yes
CHECK_OPEN_PORT=yes
CHECK_SGID=yes
CHKROOTKIT_CHECK=yes
RPM_CHECK=yes
[root@pcpc root]# msec
[root@pcpc root]# cat /etc/security/msec/security.conf
TTY_WARN=no
SYSLOG_WARN=no
MAIL_WARN=yes
MAIL_USER=root
CHECK_UNOWNED=yes
CHECK_SHADOW=yes
CHECK_SUID_MD5=yes
CHECK_SECURITY=yes
CHECK_PASSWD=yes
CHECK_SUID_ROOT=yes
CHECK_PERMS=yes
CHECK_PROMISC=no
CHECK_WRITABLE=yes
CHECK_OPEN_PORT=yes
CHECK_SGID=yes
CHKROOTKIT_CHECK=yes
RPM_CHECK=yes
[root@pcpc root]# cat /etc/cron.d/msec
*/1 * * * * root /usr/share/msec/promisc_check.sh
[root@pcpc root]# ls -l /etc/cron.d/msec
-rw-r--r-- 1 root root 56 fév 5 10:01 /etc/cron.d/msec
[root@pcpc root]#
the cron job has not been removed !
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
