patchTiger UNIX security tool - Patches: patch #2919, Re-assignment of filesystem...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #2919: Re-assignment of filesystem security alerts.

Submitter:  Ryan Bradetich <rbrad>
Submitted:  Thu 08 Apr 2004 07:27:21 AM UTC
   
 
Category:  Security test Priority:  7 - High
Status:  None Privacy:  Public
Assigned to:  rbrad Open/Closed:  Closed

Mon 21 Mar 2005 10:22:22 PM UTC, comment #1: 

I've applied this patch to the CVS sources and will be available in the next release.

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Thu 08 Apr 2004 07:27:21 AM UTC, original submission:  

Hello all,

This patch re-assigns critical security alerts from INFO (which is not reported in the default config) to ALERT for unauthorized suid and sgid files.  Unauthorized world writeable directories are reported as a FAIL.

This patch also updates the sub/check_links and sub/check_names to use message calls instead of echos.

Finally, the default tigerrc is updated to not perform the filesystem scans on setuid, setgid and wdir to maintain existing compatability.

Ryan Bradetich <rbrad>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #7256:  fix-filesystem-alerts.patch added by rbrad (5KiB - text/x-patch - This patch re-assigns critical alerts from the find_file module.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 2 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-03-21 jfs Open/ClosedOpen Closed
2004-04-08 rbrad Attached File- Added fix-filesystem-alerts.patch, #3079

Back to the top

Powered by Savane 3.13-4b48.
Corresponding source code