bugTiger UNIX security tool - Bugs: bug #7085, check_perms module is broken.

 
 

bug #7085: check_perms module is broken.

Submitted by:  Ryan Bradetich <rbrad>
Submitted on:  Mon 05 Jan 2004 06:48:58 AM UTC  
 
Category: Security check modulesSeverity: 1 - Wishlist
Item Group: NoneStatus: None
Privacy: PublicAssigned to: Ryan Bradetich <rbrad>
Open/Closed: OpenOperating System: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 05 Jan 2004 06:48:58 AM UTC, original submission:

The check_perms module appears to be broken. This is easily verified by simply changing the permissions of a specified file and running the check_perms module.

Just to show a simple example where I have changed the ownership of /etc/password:

grep ^/etc/passwd /usr/lib/tiger/systems/Linux/2/file_access_list
/etc/passwd root root 0 0 1 1 0 1 0 0 1 0 0 A 014 014 014

# ls -l /etc/passwd
-rw-r--r-- 1 bin bin 1102 Oct 18 12:00 /etc/passwd

/usr/lib/tiger/scripts/check_perms -B /usr/lib/tiger/
Configuring...

Will try to check using config for 'GNU/Linux' running Linux 2.6.0-test7...
--CONFIG-- [con005c] Using configuration files for Linux 2.6.0-test7. Using
configuration files for generic Linux 2.

# Performing check of system file permissions...
#

I have a preliminary patch in my tree that starts to address this module, but it still needs work. There is also a problem with the way the check_perms module handles the wildcard caracters (i.e. /etc/*, /etc/rc?.d, etc).

I am adding this to the Savannah BTS to better coordinate the bugs I currently have on my TODO list.

Thanks,

- Ryan

Ryan Bradetich <rbrad>
Project MemberIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follows 1 latest change.

Date Changed By Updated Field Previous Value => Replaced By
Mon 05 Jan 2004 06:48:58 AM UTCrbradCarbon-Copy-=>Added tiger-devel --AT-- nongnu --DOT-- org

Back to the top


Powered by Savane 3.1-cleanup