From owner-freebsd-security@FreeBSD.ORG Sat Jun 23 22:07:05 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EBA751065670 for ; Sat, 23 Jun 2012 22:07:05 +0000 (UTC) (envelope-from jhs@berklix.com) Received: from tower.berklix.org (tower.berklix.org [83.236.223.114]) by mx1.freebsd.org (Postfix) with ESMTP id 7418D8FC0A for ; Sat, 23 Jun 2012 22:07:04 +0000 (UTC) Received: from mart.js.berklix.net (p5DCBCCD3.dip.t-dialin.net [93.203.204.211]) (authenticated bits=0) by tower.berklix.org (8.14.2/8.14.2) with ESMTP id q5NM6pvJ081911; Sat, 23 Jun 2012 22:06:52 GMT (envelope-from jhs@berklix.com) Received: from fire.js.berklix.net (fire.js.berklix.net [192.168.91.41]) by mart.js.berklix.net (8.14.3/8.14.3) with ESMTP id q5NM6dcA016401; Sun, 24 Jun 2012 00:06:39 +0200 (CEST) (envelope-from jhs@berklix.com) Received: from fire.js.berklix.net (localhost [127.0.0.1]) by fire.js.berklix.net (8.14.4/8.14.4) with ESMTP id q5NM6R96068381; Sun, 24 Jun 2012 00:06:33 +0200 (CEST) (envelope-from jhs@fire.js.berklix.net) Message-Id: <201206232206.q5NM6R96068381@fire.js.berklix.net> To: Fahad From: "Julian H. Stacey" Organization: http://berklix.com BSD Unix Linux Consultancy, Munich Germany User-agent: EXMH on FreeBSD http://berklix.com/free/ X-URL: http://www.berklix.com In-reply-to: Your message "Fri, 22 Jun 2012 10:24:55 PDT." <4FE4AA67.4060900@budacom.net> Date: Sun, 24 Jun 2012 00:06:27 +0200 Sender: jhs@berklix.com Cc: freebsd-security@freebsd.org Subject: Re: / owned by bin causes sshd to complain bad ownership X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jun 2012 22:07:06 -0000 Hi, Reference: > From: Fahad > Date: Fri, 22 Jun 2012 10:24:55 -0700 > Message-id: <4FE4AA67.4060900@budacom.net> Fahad wrote: > As Mark put it, if everything is owned by bin you would need to be root > to do anything. False. most bins have o+rx eg -r-xr-xr-x 1 root wheel 8680 Jun 22 20:08 /usr/bin/wc* Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com Reply below not above, cumulative like a play script, & indent with "> ". Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable. Mail from @yahoo dumped @berklix. http://berklix.org/yahoo/