patchTiger UNIX security tool - Patches: patch #1353, Check ftpusers file

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #1353: Check ftpusers file

Submitter:  Invalid User ID <#15775>
Submitted:  Wed 02 Apr 2003 06:49:52 PM UTC
 
Category:  Security test Priority:  5 - Normal
Status:  None Privacy:  Public
Assigned to:  jfs Open/Closed:  Open

Mon 14 Apr 2003 06:16:34 PM UTC, comment #2: 

Here's my candidate list of system and common default
accounts that should be in the ftpuser's file:

AIX:
  root|daemon|bin|sys|adm|nobody
  uucp|nuucp|lpd|guest

HP-UX:
  root|daemon|bin|sys|adm|nobody
  uucp|nuucp|lp|hpdb

SGI/IRIX:
  root|daemon|bin|sys|adm|sysadm|diag
  uucp|4Dgifts|tour|tutor|demo

Sun:
  root|daemon|bin|sys|adm|nobody|smtp
  uucp|nuucp|lp|smmsp|listen|noaccess|nobody4

Also used on some UNIX flavors:
  guest|demo|games|man|

Invalid User ID <#15775>
Fri 04 Apr 2003 03:57:24 PM UTC, comment #1: 

Well actually I tried to include the system accounts from
multiple different UNIX flavors. I did so by looking up
on-line man pages for 'ftpusers'. Typically the man pages
would show sample system accounts. But yes, this can and
probably should be managed at the OS level with separate
config files for each UNIX flavor.

Invalid User ID <#15775>
Wed 02 Apr 2003 06:49:52 PM UTC, original submission:  

Nice check but the problem is that it has to be changed in order to be UNIX-OS-agnostic. Each UNIX (and Linux) OS version ships with a different ftpusers version and probably this should be checked differently in every version.

I will probably change this into a Tiger script and install it only for the moment in the HP-UX tree.

Invalid User ID <#15775>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

 

 

Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2003-04-04 jfs Assigned toNone NA

Back to the top


Powered by Savane 3.9