bugTiger UNIX security tool - Bugs: bug #7085, check_perms module is broken.

 
 

bug #7085: check_perms module is broken.

Submitter:  Ryan Bradetich <rbrad>
Submitted:  Mon 05 Jan 2004 06:48:58 AM UTC
   
 
Category:  Security check modules Severity:  1 - Wishlist
Item Group:  None Status:  None
Privacy:  Public Assigned to:  rbrad
Open/Closed:  Open Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 05 Jan 2004 06:48:58 AM UTC, original submission:  

The check_perms module appears to be broken.  This is easily verified by simply changing the permissions of a specified file and running the check_perms module.

Just to show a simple example where I have changed the ownership of /etc/password:

grep ^/etc/passwd /usr/lib/tiger/systems/Linux/2/file_access_list
/etc/passwd        root      root   0  0  1  1  0  1  0  0  1  0  0   A    014    014    014

# ls -l /etc/passwd
-rw-r--r--    1 bin      bin          1102 Oct 18 12:00 /etc/passwd


/usr/lib/tiger/scripts/check_perms -B /usr/lib/tiger/
Configuring...
 
Will try to check using config for 'GNU/Linux' running Linux 2.6.0-test7...
--CONFIG-- [con005c] Using configuration files for Linux 2.6.0-test7. Using
           configuration files for generic Linux 2.
 
# Performing check of system file permissions...
#

I have a preliminary patch in my tree that starts to address this module, but it still needs work.  There is also a problem with the way the check_perms module handles the wildcard caracters (i.e. /etc/*, /etc/rc?.d, etc).

I am adding this to the Savannah BTS to better coordinate the bugs I currently have on my TODO list.

Thanks,

- Ryan

Ryan Bradetich <rbrad>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2004-01-05 rbrad Carbon-Copy- Added tiger-devel --AT-- nongnu --DOT-- org

Back to the top

Powered by Savane 3.13-3230.
Corresponding source code