Bugtraq mailing list archives

Re: SunOS newsyslog bug

From: rod () iconnet com (System Administrator)
Date: Mon, 29 Aug 1994 12:26:06 -0400 (EDT)


I was surprise to see that in SunOS (4.1.3 and U1) the command
/usr/lib/newsyslog do a 'chmod 666' on the $LOG (= syslog) file he just 
created.


A bigger problem I have noticed is that the file is setup (by default)
to run at 4:05 am Sat morning by root - but it is owned by bin.  With
that 'problem' and a combination of either a netgroups bug or the +
in hosts.equiv (default on 413) this makes for a big problem with
the default SunOS configuration.  Not that we don't know that SunOS is 
shipped pretty lamely configured.

Rod

Current thread:

SunOS newsyslog bug Jean Chouanard (Aug 26)
- Re: SunOS newsyslog bug jsz (Aug 26)
- Re: SunOS newsyslog bug System Administrator (Aug 29)
- Tripwire V1.2 Release (Finally!) Gene Spafford (Aug 30)
- NFS UID bug. Casper Dik (Aug 31)
- DEC OSF/1 Enhanced Security passwd problem Tim DiLauro (Aug 31)
- <Possible follow-ups>
- Re: SunOS newsyslog bug Kenneth Kron - (Aug 26)