Tiger UNIX security tool - Patches: patch #1353, Check ftpusers file

Group

Main
- Main
- View members
- Search
Homepage
Download
Support
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Mailing lists
Source code
Bugs
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Tasks
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Patches
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
News
- Browse
- Atom feed
- ~~Submit~~
- ~~Manage~~

You are not allowed to post comments on this tracker with your current authentication level.

patch #1353: Check ftpusers file

Submitter:	Invalid User ID <#15775>
Submitted:	Wed 02 Apr 2003 06:49:52 PM UTC


Category:	Security test	Priority:	5 - Normal
Status:	None	Privacy:	Public
Assigned to:	jfs	Open/Closed:	Open

Mon 14 Apr 2003 06:16:34 PM UTC, comment #2: Here's my candidate list of system and common default accounts that should be in the ftpuser's file: AIX: root\|daemon\|bin\|sys\|adm\|nobody uucp\|nuucp\|lpd\|guest HP-UX: root\|daemon\|bin\|sys\|adm\|nobody uucp\|nuucp\|lp\|hpdb SGI/IRIX: root\|daemon\|bin\|sys\|adm\|sysadm\|diag uucp\|4Dgifts\|tour\|tutor\|demo Sun: root\|daemon\|bin\|sys\|adm\|nobody\|smtp uucp\|nuucp\|lp\|smmsp\|listen\|noaccess\|nobody4 Also used on some UNIX flavors: guest\|demo\|games\|man\|	Invalid User ID <#15775>
Fri 04 Apr 2003 03:57:24 PM UTC, comment #1: Well actually I tried to include the system accounts from multiple different UNIX flavors. I did so by looking up on-line man pages for 'ftpusers'. Typically the man pages would show sample system accounts. But yes, this can and probably should be managed at the OS level with separate config files for each UNIX flavor.	Invalid User ID <#15775>
Wed 02 Apr 2003 06:49:52 PM UTC, original submission: Nice check but the problem is that it has to be changed in order to be UNIX-OS-agnostic. Each UNIX (and Linux) OS version ships with a different ftpusers version and probably this should be checked differently in every version. I will probably change this into a Tiger script and install it only for the moment in the HP-UX tree.	Invalid User ID <#15775>

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

Depends on the following items: None found

Items that depend on this one: None found

CC list is empty

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Follows 1 latest change.

Date	Changed by	Updated Field	Previous Value	=>	Replaced by
2003-04-04	jfs	Assigned to	None		None

Tiger UNIX security tool - Patches: patch #1353, Check ftpusers file

patch #1353: Check ftpusers file

<a href="#discussion">Discussion</a>

<a href="#attached">Attached Files</a>

<a href="#dependencies">Dependencies</a>

<a href="#cc">Mail Notification Carbon-Copy List</a>

<a href="#votes">Votes</a>

<a href="#history">History</a>