Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Jan 1999 21:44:37 +1100 (EDT)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        vadim@tversu.ru (Vadim Kolontsov)
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: kernel/syslogd hack
Message-ID:  <199901061044.VAA24694@cheops.anu.edu.au>
In-Reply-To: <19990106132848.A14928@tversu.ru> from "Vadim Kolontsov" at Jan 6, 99 01:28:48 pm

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Vadim Kolontsov, sie said:
> 
> Hello,
> 
> On Wed, Jan 06, 1999 at 08:35:23PM +1100, Darren Reed wrote:
> 
> > As far as /var/run/log goes, chown/chgrp/chmod are your friends or you
> > can make /var/run/log a symbolic link to a protected directory with which
> > you use the -p argument to place the log socket.  e.g.:
> > # mkdir /var/run/log.d
> > # chmod 700 /var/run/log.d
> > # ln -s /var/run/log.d/log /var/run/log
> > # syslogd -p /var/run/log/log
> 
>   Sorry, I didn't understand you. In which cases would it help?

The above stops non-root from sending syslog messages, locally.

Darren

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199901061044.VAA24694>