Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Mar 1997 11:03:09 +0000
From:      Gary Jennejohn <garyj@munich.netsurf.de>
To:        Brian Litzinger <brian@mpress.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Is a device entry setuid to root a security issue? 
Message-ID:  <199703191103.LAA01703@peedub.gj.org>
In-Reply-To: Your message of "Tue, 18 Mar 1997 23:21:11 PST." <19970318232111.57970@mpress.mpress.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Litzinger writes:
>amanda (the tape backup program) just puked today because
>
>ERROR: home.xxx.com: [can not read/write /dev/null: Permission denied]
>
>So I took a peek:
>
>brian@home>ls -ld /dev/null
>cr-sr-xr-x  1 root  bin    2,   2 Dec 10 17:45 /dev/null*            
>
>Is this a security risk?
>

this is hosed. Devices shouldn't be executable. I have
crw-rw-rw-  1 root  wheel    2,   2 Mar 18 11:13 /dev/null

---
Gary Jennejohn
Home - Gary.Jennejohn@munich.netsurf.de
Work - gjennejohn@frt.dec.com





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199703191103.LAA01703>