bugTiger UNIX security tool - Bugs: bug #37284, Running Tiger

 
 

bug #37284: Running Tiger

Submitter:  None
Submitted:  Thu 06 Sep 2012 10:49:58 AM UTC
   
 
Category:  None Severity:  5-Critical
Item Group:  None Status:  Need Info
Privacy:  Public Assigned to:  None
Open/Closed:  Open Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 21 Feb 2013 11:46:27 PM UTC, comment #3: 

I am having the same problem as OP.

Tiger UN*X security checking system
   Developed by Texas A&M University, 1994
   Updated by the Advanced Research Corporation, 1999-2002
   Further updated by Javier Fernandez-Sanguino, 2001-2010
   Contributions by Francisco Manuel Garcia Claramonte, 2009-2010
   Covered by the GNU General Public License (GPL)

Configuring...
 
Will try to check using config for 'i686' running Linux 2.6.38-16-generic...
--CONFIG-- [con005c] Using configuration files for Linux 2.6.38-16-generic. Using
           configuration files for generic Linux 2.
Tiger security scripts * 3.2.3, 2008.09.10.09.30 *
17:33> Beginning security report for desktop.
17:33> Starting file systems scans in background...
17:33> Checking password files...
17:33> Checking group files...
17:33> Checking user accounts...
17:34> Checking .rhosts files...
17:34> Checking .netrc files...
17:34> Checking ttytab, securetty, and login configuration files...
17:34> Checking PATH settings...
17:34> Checking anonymous ftp setup...
17:34> Checking mail aliases...
17:34> Checking cron entries...
17:34> Checking 'services' configuration...
17:34> Checking NFS export entries...
17:34> Checking permissions and ownership of system files...
17:34> Checking for indications of break-in...
17:34> Performing rootkit checks...
17:34> Performing system specific checks...
/bin/grep: /etc/inittab: No such file or directory

Mine freezes here, too.

I originally installled Tiger through Software Manager which installed version 1:3.2.3-6

So I downloaded version 1:3.2.3-10 from this link: http://ftp.de.debian.org/debian/pool/main/t/tiger/tiger_3.2.3.orig.tar.gz

Extracted, installed and still get the same results.

As you can see from the terminal output I'm apparently still running the older version. However, a check with dpkg --list outputs the following:
ii  tiger          1:3.2.3-10


 




Patti Evans <plevans>
Fri 07 Sep 2012 01:53:16 PM UTC, comment #2: 

Just to confirm: are you using Tiger in an Ubuntu system. If so, which package version are you using? (3.2.3-6?)

I would recommend you to upgrade to the last release of the Debian packages (3.2.3-10) available at http://packages.debian.org/sid/tiger and see if you can reproduce the issues you have.

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Fri 07 Sep 2012 01:45:14 PM UTC, comment #1: 

It looks like one of the script does not work properly in your system and freezes it. Could you please run the following (as root) and attach the output to this bug report?

sh -x /usr/lib/tiger/systems/Linux/2/check_inittab

Thanks

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Thu 06 Sep 2012 10:49:58 AM UTC, original submission:  

There is an error running Tiger.
Terminal:

Tiger UN*X security checking system
   Developed by Texas A&M University, 1994
   Updated by the Advanced Research Corporation, 1999-2002
   Further updated by Javier Fernandez-Sanguino, 2001-2010
   Contributions by Francisco Manuel Garcia Claramonte, 2009-2010
   Covered by the GNU General Public License (GPL)

Configuring...
 
Will try to check using config for 'i686' running Linux 3.2.0-30-generic-pae...
--CONFIG-- [con005c] Using configuration files for Linux 3.2.0-30-generic-pae. Using
           configuration files for generic Linux 3.
Tiger security scripts * 3.2.3, 2008.09.10.09.30 *
06:41> Beginning security report for juk-HP-Pavilion-dm4-Notebook-PC.
06:41> Starting file systems scans in background...
06:41> Checking password files...
06:41> Checking group files...
06:41> Checking user accounts...
06:42> Checking .rhosts files...
06:42> Checking .netrc files...
06:42> Checking ttytab, securetty, and login configuration files...
06:42> Checking PATH settings...
06:42> Checking anonymous ftp setup...
06:42> Checking mail aliases...
06:42> Checking cron entries...
06:42> Checking 'services' configuration...
06:42> Checking NFS export entries...
06:42> Checking permissions and ownership of system files...
--CONFIG-- [con010c] Filesystem 'devtmpfs' used by 'udev' is not recognised as a valid filesystem
06:42> Checking for indications of break-in...
--CONFIG-- [con010c] Filesystem 'devtmpfs' used by 'udev' is not recognised as a valid filesystem
06:42> Performing rootkit checks...
06:42> Performing system specific checks...
/bin/grep: /etc/inittab: No such file or directory


...freezes there.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by plevans (Posted a comment)
  • -email is unavailable- added by jfs (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-09-07 jfs StatusNone Need Info

    Back to the top

    Powered by Savane 3.14-8eb0.
    Corresponding source code