Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2009-01-11 Thread Christoph Anton Mitterer
Hi. Isn't this a possible security issue? I mean when someone has set the envionment variable TMPDIR and the files are copied there instead to the location specified in rkhunter.conf? Shouldn't rkhunter completely ignore $TMPDIR? That should be perhaps forwarded upstream?! Chris. smime.p7s D

Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2007-02-07 Thread Julien Valroff
Le mercredi 07 février 2007 à 18:21 +0100, Dr. Markus Waldeck a écrit : > Hi, > > > > This could result in an unexpected behavior. > > Can you detail? If you have an environment variable like $TMPDIR, it > > should be a temporary directory anyway. Or maybe I don't understand the > > issue. > > $T

Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2007-02-07 Thread Julien Valroff
Le mercredi 07 février 2007 à 16:28 +0100, Dr. Markus Waldeck a écrit : > Hi, > > thanks for your prompt answer! > > > It is the standard and normal behaviour, as rkhunter keeps a local copy > > of these files to be able to report any changes made between 2 rkhunter > > checks. > > > > "Checking

Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2007-02-07 Thread Dr. Markus Waldeck
Hi, thanks for your prompt answer! > It is the standard and normal behaviour, as rkhunter keeps a local copy > of these files to be able to report any changes made between 2 rkhunter > checks. > > "Checking for differences in user accounts..." > "Checking for differences in user groups..." I ch

Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2007-02-06 Thread Julien Valroff
Le mardi 06 février 2007 à 21:30 +0100, Dr. Markus Waldeck a écrit : > Package: rkhunter > Version: 1.2.9-2 > Severity: normal > > During the execution of rkhunter some files are copied or generated > in $TMPDIR but passwd and groups are the only ones that were not removed. Hi, It is the standar

Bug#409973: rkhunter leaves copies of /etc/passwd and /etc/groups in $TMPDIR

2007-02-06 Thread Dr. Markus Waldeck
Package: rkhunter Version: 1.2.9-2 Severity: normal During the execution of rkhunter some files are copied or generated in $TMPDIR but passwd and groups are the only ones that were not removed. -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (990, 'testing') Archit