[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] POSSIBLE MAJOR SECURITY BREACH



> >
> >[admin admin]$ ls /etc/shadow -l
> >-r--------   1 root     root          552 Sep 29
> >21:04 /etc/shadow
> >[admin admin]$ ls /etc/shadow- -l
> >-rw-------   1 root     root          524 Sep 29
> >07:25 /etc/shadow-
>

We took a freshly restored RaQ4 and imported one site using the CMU from
another RaQ4
and it changed the permissions from:

-r-------- 1 root     root        34081 Feb  8 14:59 shadow
-r-------- 1 root     root        34042 Feb  8 13:55 shadow-

to:

-rw-rw-r-- 1 root     root        34081 Feb  8 14:59 shadow
-rw-rw-r--1 root     root        34042 Feb  8 13:55 shadow-



Mike
>
> __________________________________________________
> Do You Yahoo!?
> Send FREE Valentine eCards with Yahoo! Greetings!
> http://greetings.yahoo.com
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security