[5551] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: RedHat4.0 security

daemon@ATHENA.MIT.EDU (James Youngman)
Fri Nov 22 05:24:37 1996

To: redhat-list@redhat.com
From: JYoungman@vggas.com (James Youngman)
Date: 22 Nov 1996 10:22:51 GMT
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

In article <571gsj$1gm@halon.vggas.com>, wpilorz@celebris.bdk.lublin.pl says...

>> I also find a bunch of suid root programs on my system, but I know why the
>> overwhelming majority of them need to be.  Admittedly, there are few that
>> I don't know as much about as I should.  I wonder what
>> that /usr/sbin/backdoor could be?  :) :) :) 
>A suid program you have written to log intrusion attempts .... :-)
>> 
>> Kyle Ferrio
>> 
>BTW:
>On my RHL 4.0, I have:
>-rwsr-sr-x   1 root     tty         51296 Aug 29 22:30 /sbin/dump
>-rwsr-sr-x   1 root     tty         55376 Aug 29 22:30 /sbin/restore
>
>Anyone has any clue, what set-group-id to tty is needed for them?

They need to be able to send a message to everybody (erm..) in the operat9or 
group to tell them to change the backup tape when a backup requires more than 
one tape.

These programs also require to be able to write /etc/dumpdates and read the 
disk devices.  IMHO the ideal solution could be to make /etc/dumpdates group 
disk, but that itself may have security implications.

-- 
James Youngman       VG Gas Analysis Systems |The trouble with the rat-race 
 Before sending advertising material, read   |is, even if you win, you're 
http://www.law.cornell.edu/uscode/47/227.html|still a rat.


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post