Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
security handbook questions about file permissions
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
good ole flopp
n00b
n00b


Joined: 12 Feb 2006
Posts: 13

PostPosted: Sat May 06, 2006 10:51 am    Post subject: security handbook questions about file permissions Reply with quote

:)
sorry if this doesn't belong here, i'm still learning my way around.

http://www.gentoo.org/doc/en/security/security-handbook.xml?part=1&chap=6

at the top there it talks about world/group writable files.
it describes how to make a huge file listing files and directories with g+w or o+w privs set.
then it goes on to suggest setting o-w for the files and directories.

first question, why bother listing group writable files if nothing is to be done with them?
second question, on a fresh install why would any of the files have any o privs?
last question, why would i go through that list chmoding the files one at a time when i could chmod -R o-w and accomplish the same thing?

:p
thanks in advance!
_________________
"if only we knew what we don't know, we'd do things right the first time."
Back to top
View user's profile Send private message
Maedhros
Bodhisattva
Bodhisattva


Joined: 14 Apr 2004
Posts: 5511
Location: Durham, UK

PostPosted: Sat May 06, 2006 11:17 am    Post subject: Reply with quote

Moved from Other Things Gentoo to Networking & Security.
_________________
No-one's more important than the earthworm.
Back to top
View user's profile Send private message
magic919
Advocate
Advocate


Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK

PostPosted: Sun May 07, 2006 6:02 am    Post subject: Reply with quote

The document is not saying make a list and then bin it. Having been made aware of the potential you'd be expected to take the action you see fit. A clued-up user might stick the list into a script to make the changes (having removed from the list any unimportant ones). Whether you could achieve the same result with a general recursive chmod is doubtful, but you'd have to study the list on the system concerned.
Back to top
View user's profile Send private message
good ole flopp
n00b
n00b


Joined: 12 Feb 2006
Posts: 13

PostPosted: Sun May 07, 2006 6:37 am    Post subject: hmpf Reply with quote

:)
am i mistaken in thinking the commands there written find ALL the directories and files with o+w set?
if it's all of them, recursive would be the easiest way to take care of it.

but why, on a fresh install, would any directories or files have o+w set?
am i being unreasonable by thinking that's ridiculous?
_________________
"if only we knew what we don't know, we'd do things right the first time."
Back to top
View user's profile Send private message
magic919
Advocate
Advocate


Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK

PostPosted: Sun May 07, 2006 10:07 pm    Post subject: Reply with quote

I take it you haven't made the list then. If this could all be solved with a quick recursive chmod from the root I can't imagine that page of the handbook would be quite so long...
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum