From owner-freebsd-security Sat Mar 10 20:45: 8 2001 Delivered-To: freebsd-security@freebsd.org Received: from ohm.physics.purdue.edu (ohm.physics.purdue.edu [128.210.146.32]) by hub.freebsd.org (Postfix) with ESMTP id 5828C37B718 for ; Sat, 10 Mar 2001 20:45:05 -0800 (PST) (envelope-from will@physics.purdue.edu) Received: (from will@localhost) by ohm.physics.purdue.edu (8.11.2/8.9.3) id f2B4lGw61014; Sat, 10 Mar 2001 23:47:16 -0500 (EST) (envelope-from will@physics.purdue.edu) X-Authentication-Warning: ohm.physics.purdue.edu: will set sender to will@physics.purdue.edu using -f Date: Sat, 10 Mar 2001 23:47:16 -0500 From: Will Andrews To: Dan Langille Cc: security@FreeBSD.ORG Subject: Re: temp files for security/logcheck Message-ID: <20010310234716.S45561@ohm.physics.purdue.edu> Reply-To: Will Andrews Mail-Followup-To: Will Andrews , Dan Langille , security@FreeBSD.ORG References: <200103110435.f2B4ZHw04676@ns1.unixathome.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="+cdUESGy8E0PQTBL" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200103110435.f2B4ZHw04676@ns1.unixathome.org>; from dan@langille.org on Sun, Mar 11, 2001 at 05:35:16PM +1300 X-Operating-System: FreeBSD 4.2-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --+cdUESGy8E0PQTBL Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Mar 11, 2001 at 05:35:16PM +1300, Dan Langille wrote: > The port security/logcheck creates /usr/local/etc/tmp[1] and chmod's it= =20 > to 700. It does that because the temp files it creates and uses need to= =20 > be relativly secure. It writes out several files that could cause proble= ms=20 > if a user made links, etc. >=20 > Does anyone see any issues which we need to deal with? e.g. the=20 > security of this directory, the name of this directory... If logcheck needs secure tempfiles, it can chmod them. Or if it needs a dir to itself, it can have a /usr/local/var/tmp/logcheck/ directory. --=20 wca --+cdUESGy8E0PQTBL Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.3 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6qwNUF47idPgWcsURAj7KAJsErCuY4CvKu1Xp2V/0W9YmzHfT8ACfY8c6 ZTasLdWuj5dF4KdMBetFsDE= =1GeG -----END PGP SIGNATURE----- --+cdUESGy8E0PQTBL-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message