4.1.1 security

Thread View: comp.sys.sun

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Scott Schwartz Thu, 27 Jun 1991 20:22

#8697

Author: Scott Schwartz
Date: Thu, 27 Jun 1991 20:22

20 lines
1217 bytes

I just unpacked a new SS2, with SunOS preinstalled on the disk.  While
poking around getting it ready to play nicely with our other machines,
I noticed a few things.

* There is no umask set in /etc/rc, so lots of files created by
  daemons wind up world writable.

* Beyond that, /etc/aliases.*, /etc/remote, and /etc/motd are world
  writable.  There may be others -- those are just the ones I noticed
  immediately.

* There is a "+" in /etc/hosts.equiv, /etc/passwd, and /etc/group.

All sorts of mischief is possible unless these things are fixed up.
I'd feel much happier if my machine wasn't totally insecure right out
of the box.  Fixed in 4.1.2 perhaps?

P.S.  Has Sun stopped advertising "The Network is the Computer"?

-- Scott

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads