help me serius problems

[Giorgos Keramidas]

On 2005-10-18 02:41, p pap <sibas11 at hotmail.com> wrote:
> tora h idea mou einai oti afou eixa balei se paranoid to file
> permissions htan fusiko na deixnei oti eixe problima, alla pali auti
> einai h dikia mou paranoiki idea ostoso sto
> /var/log/yast2/y2log.suseconfig blepo kati perierga permissions opos

Hmmm, merika sxolia gia ta permissions:

> setting /usr/bin/gpasswd to root:shadow 0755. (wrong permissions 4755)
> setting /usr/bin/newgrp to root:root 0755. (wrong permissions 4755)
> setting /usr/bin/passwd to root:shadow 0755. (wrong permissions 4755)
> setting /usr/bin/chfn to root:shadow 0755. (wrong permissions 4755)
> setting /usr/bin/chage to root:shadow 0755. (wrong permissions 4755)
> setting /usr/bin/chsh to root:shadow 0755. (wrong permissions 4755)

Oraios tropos na basanisteis me aperioristous tropous sto mellon otan 8a
prospa8hseis na allakseis password, username, shell apo plain user :P

> setting /usr/lib/pt_chown to root:root 0755. (wrong permissions 4755)

Hmmm, _ayto_ DEN einai kalh idea.

> setting /usr/bin/man to root:root 0755. (wrong permissions 4755)

Mikro to kako.  To poly poly na kaneis panta reformat ta manpages kai na
mh swzontai preformatted sto /usr/man/cat1, /usr/man/cat2, ...

> setting /bin/ping to root:root 0755. (wrong permissions 4755)
> setting /bin/ping6 to root:root 0755. (wrong permissions 4755)

Pws mou th spaei otan eimai aplos user kai de mporw na kanw ping h
traceroute epeidh kapoios admin pisteyei oti htan kalh idea na to kanei
ayto.

Yparxei logos pou einai setuid root to ping.  Stelnei ICMP paketa se ena
"raw" socket.  Me to na afaireitai to setuid-root, basika, afaireitai to
dikaiwma apo opoiondhpote user den einai hdh root na kanei ping :(

> setting /usr/bin/rcp to root:root 0755. (wrong permissions 4755)
> setting /usr/bin/rlogin to root:root 0755. (wrong permissions 4755)
> setting /usr/bin/rsh to root:root 0755. (wrong permissions 4755)

Ok, ayta mporoun na pane sto diaolo.  Den ta xrhsimopoiei kaneis pia :P

> oso gia to rpcbind auto akoma adunato na katalabo pos ksekinise.
> fusika to mixanaki to pao gia format apla to psaxno oso mporo

Isws epeidh kapoia stigmh prospa8hses na energopoihseis esu kapoio "NFS
client" h kati tetoio.  An krinw apo ta paixnidia me to yast parapanw,
den einai apithano na MHN se exoun hackepsei alla apla na dialyses to
mhxanhma kanontas click se random yast options.  Kalh tyxh otan to
epanafereis :P