From owner-freebsd-security  Mon Oct  1 21:28:58 2001
Delivered-To: freebsd-security@freebsd.org
Received: from webs1.accretive-networks.net (webs1.accretive-networks.net [207.246.154.13])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9AAF137B40F; Mon,  1 Oct 2001 21:28:52 -0700 (PDT)
Received: from localhost (davidk@localhost)
	by webs1.accretive-networks.net (8.11.1/8.11.3) with ESMTP id f923P0q61137;
	Mon, 1 Oct 2001 20:25:00 -0700 (PDT)
Date: Mon, 1 Oct 2001 20:25:00 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
X-X-Sender:  <davidk@localhost>
To: "f.johan.beisser" <jan@caustic.org>
Cc: default <default013subscriptions@hotmail.com>,
	<freebsd-security@FreeBSD.ORG>, <freebsd-questions@FreeBSD.ORG>
Subject: Re: file permission question
In-Reply-To: <Pine.BSF.4.21.0110012114320.4143-100000@pogo.caustic.org>
Message-ID: <20011001202424.X85958-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Mon, 1 Oct 2001, f.johan.beisser wrote:

> your best bet is to meticuously comb through your installed files, and
> only allow trusted users on your machines.

Running a file integrity check such as tripwire is also a good idea - as
long as you run tripwire from a read-only floppy or something similar that
is. :-)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message