Re: world readable log files and /etc/ files

2002-04-30 Thread Steve Meyer
It is also important to remember not to chown log files. If you do this you could run into problems. The proccess that writes the file may not be able too. From: Wichert Akkerman <[EMAIL PROTECTED]> To: debian-security@lists.debian.org Subject: Re: world readable log files and /etc/

Re: world readable log files and /etc/ files

2002-04-29 Thread Peter Cordes
On Mon, Apr 29, 2002 at 12:43:15PM +0200, Lupe Christoph wrote: > On Monday, 2002-04-29 at 02:40:57 +1000, Ian Cumming wrote: > > > I was just cleaning up after rebuilding a machine, and I decided to take > > a look at the log file and /etc permissions. > > [...] > > /etc/smb/smb.conf > > This on

Re: world readable log files and /etc/ files

2002-04-29 Thread Steve Meyer
It is also important to remember not to chown log files. If you do this you could run into problems. The proccess that writes the file may not be able too. >From: Wichert Akkerman <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: world readable log files and /etc/ f

Re: world readable log files and /etc/ files

2002-04-29 Thread Peter Cordes
On Mon, Apr 29, 2002 at 12:43:15PM +0200, Lupe Christoph wrote: > On Monday, 2002-04-29 at 02:40:57 +1000, Ian Cumming wrote: > > > I was just cleaning up after rebuilding a machine, and I decided to take > > a look at the log file and /etc permissions. > > [...] > > /etc/smb/smb.conf > > This o

Re: world readable log files and /etc/ files

2002-04-29 Thread Lupe Christoph
On Monday, 2002-04-29 at 02:40:57 +1000, Ian Cumming wrote: > I was just cleaning up after rebuilding a machine, and I decided to take > a look at the log file and /etc permissions. Which release? Woody? > I was quite alarmed. There seem to be many files with world readable > permissions, which

Re: world readable log files and /etc/ files

2002-04-29 Thread Lupe Christoph
On Monday, 2002-04-29 at 02:40:57 +1000, Ian Cumming wrote: > I was just cleaning up after rebuilding a machine, and I decided to take > a look at the log file and /etc permissions. Which release? Woody? > I was quite alarmed. There seem to be many files with world readable > permissions, which

Re: world readable log files and /etc/ files

2002-04-28 Thread Wichert Akkerman
Previously Ian Cumming wrote: > I was quite alarmed. There seem to be many files with world readable > permissions, which _shouldnt_. If you don't trust your local users on a server you have a different problem imho. > What is the policy for log files? I understand that it doesnt do _that_ > much

Re: world readable log files and /etc/ files

2002-04-28 Thread Wichert Akkerman
Previously Ian Cumming wrote: > I was quite alarmed. There seem to be many files with world readable > permissions, which _shouldnt_. If you don't trust your local users on a server you have a different problem imho. > What is the policy for log files? I understand that it doesnt do _that_ > muc

world readable log files and /etc/ files

2002-04-28 Thread Ian Cumming
Hi, I was just cleaning up after rebuilding a machine, and I decided to take a look at the log file and /etc permissions. I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. ie: /var/log/xfer.log /var/log/samba/* /var/log/mailman/* and in /etc: /e

world readable log files and /etc/ files

2002-04-28 Thread Ian Cumming
Hi, I was just cleaning up after rebuilding a machine, and I decided to take a look at the log file and /etc permissions. I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. ie: /var/log/xfer.log /var/log/samba/* /var/log/mailman/* and in /etc: /