bugTiger UNIX security tool - Bugs: bug #7085, check_perms module is broken.


bug #7085: check_perms module is broken.

Submitter:  Ryan Bradetich <rbrad>
Submitted:  Mon 05 Jan 2004 06:48:58 AM UTC
Category:  Security check modules Severity:  1 - Wishlist
Item Group:  None Status:  None
Privacy:  Public Assigned to:  rbrad
Open/Closed:  Open Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup

Mon 05 Jan 2004 06:48:58 AM UTC, original submission:  

The check_perms module appears to be broken.  This is easily verified by simply changing the permissions of a specified file and running the check_perms module.

Just to show a simple example where I have changed the ownership of /etc/password:

grep ^/etc/passwd /usr/lib/tiger/systems/Linux/2/file_access_list
/etc/passwd        root      root   0  0  1  1  0  1  0  0  1  0  0   A    014    014    014

# ls -l /etc/passwd
-rw-r--r--    1 bin      bin          1102 Oct 18 12:00 /etc/passwd

/usr/lib/tiger/scripts/check_perms -B /usr/lib/tiger/
Will try to check using config for 'GNU/Linux' running Linux 2.6.0-test7...
--CONFIG-- [con005c] Using configuration files for Linux 2.6.0-test7. Using
           configuration files for generic Linux 2.
# Performing check of system file permissions...

I have a preliminary patch in my tree that starts to address this module, but it still needs work.  There is also a problem with the way the check_perms module handles the wildcard caracters (i.e. /etc/*, /etc/rc?.d, etc).

I am adding this to the Savannah BTS to better coordinate the bugs I currently have on my TODO list.


- Ryan

Ryan Bradetich <rbrad>
Group Member


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.


Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2004-01-05 rbrad Carbon-Copy- Added tiger-devel --AT-- nongnu --DOT-- org

Back to the top

Powered by Savane 3.13-4b48.
Corresponding source code