Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 5 Oct 2002 13:48:51 -0700 (PDT)
From:      Holt Grendal <holtor@yahoo.com>
To:        security@freebsd.org
Cc:        stable@freebsd.org
Subject:   Daily Security Output to check GID 0
Message-ID:  <20021005204851.89445.qmail@web11606.mail.yahoo.com>

next in thread | raw e-mail | index | archive | help
Would it be possible for someone to get whoever runs the
periodic system in freebsd to somehow add a facility that
runs in the daily scripts to check users with GID 0 aswell
as users with UID 0?

Like we have now, only get GID 0 also?:

# 300.chkuid0
daily_status_security_chkuid0_enable="YES"


I've recently had a machine where some users got ahold
of another login who was in /etc/group and got to root
and then changed their user groups to 0 and I didnt notice
untill checking the master.passwd file line by line.

The output would have caught it the day it happened.

Would this be possible? TIA

Holt


__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021005204851.89445.qmail>