[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] POSSIBLE MAJOR SECURITY BREACH



On Saturday 09 February 2002 11:08 am, Mike Fritsch wrote:
> We took a freshly restored RaQ4 and imported one site using the CMU from
> another RaQ4
> and it changed the permissions from:
>
> -r-------- 1 root     root        34081 Feb  8 14:59 shadow
> -r-------- 1 root     root        34042 Feb  8 13:55 shadow-
>
> to:
>
> -rw-rw-r-- 1 root     root        34081 Feb  8 14:59 shadow
> -rw-rw-r--1 root     root        34042 Feb  8 13:55 shadow-
>

then it must be the CMU!
Now, have all you users with changed permissions used the CMU

-- 
Gerald Waugh