The check_perms module appears to be broken. This is easily verified by simply changing the permissions of a specified file and running the check_perms module.
Just to show a simple example where I have changed the ownership of /etc/password:
grep ^/etc/passwd /usr/lib/tiger/systems/Linux/2/file_access_list
/etc/passwd root root 0 0 1 1 0 1 0 0 1 0 0 A 014 014 014
# ls -l /etc/passwd
-rw-r--r-- 1 bin bin 1102 Oct 18 12:00 /etc/passwd
/usr/lib/tiger/scripts/check_perms -B /usr/lib/tiger/
Configuring...
Will try to check using config for 'GNU/Linux' running Linux 2.6.0-test7...
--CONFIG-- [con005c] Using configuration files for Linux 2.6.0-test7. Using
configuration files for generic Linux 2.
# Performing check of system file permissions...
#
I have a preliminary patch in my tree that starts to address this module, but it still needs work. There is also a problem with the way the check_perms module handles the wildcard caracters (i.e. /etc/*, /etc/rc?.d, etc).
I am adding this to the Savannah BTS to better coordinate the bugs I currently have on my TODO list.
Thanks,
- Ryan
|