bugTiger UNIX security tool - Bugs: bug #59809, False positive in dev003w warning...

 
 

bug #59809: False positive in dev003w warning (/dev/cpu/)

Submitter:  Francois Marier <fmarier>
Submitted:  Sun 03 Jan 2021 03:20:25 PM UTC
   
 
Category:  Security check modules Severity:  5-Critical
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open Operating System:  Debian GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 20 Jan 2024 10:48:41 PM UTC, comment #1: 

Same goes for the following dirs:

  • /dev/block
  • /dev/char
  • /dev/dma_heap
  • /dev/mqueue
  • /dev/v4l
pyllyukko <pyllyukko>
Sun 03 Jan 2021 03:20:25 PM UTC, original submission:  

The following warning appears to be a false positive (at least on Debian):

  # Checking device permissions...
  NEW: --WARN-- [dev003w] The directory /dev/cpu resides in a device directory.

since it looks like a real dev directory:

  $ find /dev/cpu/
  /dev/cpu/
  /dev/cpu/3
  /dev/cpu/3/msr
  /dev/cpu/2
  /dev/cpu/2/msr
  /dev/cpu/1
  /dev/cpu/1/msr
  /dev/cpu/0
  /dev/cpu/0/msr

Francois Marier <fmarier>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by pyllyukko (Posted a comment)
  • -email is unavailable- added by fmarier (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code