Tiger UNIX security tool - Patches: patch #1353, Check ftpusers file
You are not allowed to post comments on this tracker with your current authentication level.
patch #1353: Check ftpusers file
Submitter: | Invalid User ID <#15775> | ||
Submitted: | Wed 02 Apr 2003 06:49:52 PM UTC | ||
Category: | Security test | Priority: | 5 - Normal |
Status: | None | Privacy: | Public |
Assigned to: | jfs | Open/Closed: | Open |
Mon 14 Apr 2003 06:16:34 PM UTC, comment #2: |
Invalid User ID <#15775> |
Fri 04 Apr 2003 03:57:24 PM UTC, comment #1: Well actually I tried to include the system accounts from
|
Invalid User ID <#15775> |
Wed 02 Apr 2003 06:49:52 PM UTC, original submission:
Nice check but the problem is that it has to be changed in order to be UNIX-OS-agnostic. Each UNIX (and Linux) OS version ships with a different ftpusers version and probably this should be checked differently in every version.
|
Invalid User ID <#15775> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follows 1 latest change.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2003-04-04 | jfs | Assigned to | None | ![]() |
None |
Here's my candidate list of system and common default
accounts that should be in the ftpuser's file:
AIX:
root|daemon|bin|sys|adm|nobody
uucp|nuucp|lpd|guest
HP-UX:
root|daemon|bin|sys|adm|nobody
uucp|nuucp|lp|hpdb
SGI/IRIX:
root|daemon|bin|sys|adm|sysadm|diag
uucp|4Dgifts|tour|tutor|demo
Sun:
root|daemon|bin|sys|adm|nobody|smtp
uucp|nuucp|lp|smmsp|listen|noaccess|nobody4
Also used on some UNIX flavors:
guest|demo|games|man|