[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] [SECURITY WARNING] All Neomail users
- Subject: Re: [cobalt-security] [SECURITY WARNING] All Neomail users
- From: Michael Stauber <cobalt@xxxxxxxxxxxxxx>
- Date: Fri, 16 Nov 2001 22:46:26 +0100
- Organization: Stauber Multimedia Design
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi Taco,
I've installed Neomail 1.25-4 over 1.25-3 and I wonder about the following
changes to my filesystem (Output generated from FCheck, which is a Tripwire
replacement):
PROGRESS: validating integrity of /usr/
STATUS:
WARNING: [admin.smd.net] /usr/bin/sperl5.00503
[Permissions: -rws--x--x - -rwx--x--x, Times: Sep 13 16:04 2001 - Nov
15 09:12 2001]
WARNING: [admin.smd.net] /usr/bin/suidperl
[Permissions: -rws--x--x - -rwx--x--x, Times: Sep 13 16:04 2001 - Nov
15 09:12 2001]
Why does your Neomail PKG need to mess around with the SUID-bit of suidperl?
That's actually not that nice I'd say, as it (in my case) has the tendency to
break some custom stuff I've got on my machine.
--
Mit freundlichen Grüßen / With best regards
Michael Stauber
Stauber Multimedia Design ____ Phone: +49-6081-946240
Eppsteiner Weg 9 ___ D-61267 Neu-Anspach ___ Germany
SMD.NET ___ SOLARSPEED.NET ___ FORUMWORLD.COM