suid bit files and securing FreeBSD

2003-07-26 Thread Peter Rosa
Hello everybody, I'm a newbie in this list, so I don't know if it's the appropriate place for my question. Anyway, I'd be happy to find out the solution. Please, has anyone simple answer for: I'm looking for an exact list of files, which: 1. MUST have... 2. HAVE FROM BSD INSTALLATION... 3. DO

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Peter Rosa
Sorry for disturbing you. This was for security mailing list and I sent it here by mistake Cheers, Peter Rosa - Original Message - From: Peter Rosa [EMAIL PROTECTED] To: FreeBSD Questions [EMAIL PROTECTED] Sent: Saturday, July 26, 2003 7:11 PM Subject: suid bit files and securing

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Matthew Graybosch
Second question is: Has anybody an exact wizard, how to secure the FreeBSD machine. Imagine the situation, the only person who can do anything on that machine is me, and nobody other. I have set very restrictive firewalling, I have removed ALL tty's except two local tty's (I need to work on

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Peter Rosa
, July 26, 2003 7:22 PM Subject: Re: suid bit files and securing FreeBSD Second question is: Has anybody an exact wizard, how to secure the FreeBSD machine. Imagine the situation, the only person who can do anything on that machine is me, and nobody other. I have set very restrictive

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Daniel Harris
Matthew Graybosch wrote: But if you're concerned with security uber alles, I'm surprised you didn't look into OpenBSD first. According to their site (openbsd.org), they've had only one remote hole in the default install, in more than 7 years! Caveat: the default install has almost nothing in

Re: suid bit files and securing FreeBSD

2003-07-26 Thread Chuck Swiger
Peter Rosa wrote: [ ... ] I'm looking for an exact list of files, which: 1. MUST have... 2. HAVE FROM BSD INSTALLATION... 3. DO NOT NEED... 4. NEVER MAY... ...the suid-bit set. Of course, it's no problem to find-out which files ALREADY HAS suid-bit set. But what files REALLY MUST have it ? The