The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Special Forums > Security
Google UNIX.COM


Security Anything involving computer security goes here.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Error Message in unix komang SUN Solaris 2 01-23-2007 08:50 PM
Error in unix Jayashree Shell Programming and Scripting 0 09-07-2006 05:44 AM
UNIX error log eysheikah Security 0 05-30-2003 06:05 AM
unix ftp error msg help royxiao UNIX for Advanced & Expert Users 1 10-31-2002 05:52 AM
SCO UNIX error 6, HELP PBNOSGT UNIX for Dummies Questions & Answers 0 02-01-2002 07:46 AM

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-30-2003
Registered User
 

Join Date: Sep 2002
Location: New York
Posts: 10
Question UNIX error log

A system administration utility has recently been installed at the SCO Openserver (UNIX) servers of our bank. While
receiving the error log files of this utility, we have noted the following warning messages:

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-comfficeffice" />

· Alert: /etc: File Control Database inconsistency. The File Control Database may be compromised. Run Integrity
(ADM).



· Alert: Authentication database path /etc/shadow may be compromised – run integrity (ADM).



It may be noted that one of the functions performed by this utility is to copy etc/shadow to another directory for data
back-up purposes. We have objected to this practice.



I will appreciate if someone can guide me about the significance of the above errors.
Reply With Quote
Forum Sponsor
  #2 (permalink)  
Old 05-30-2003
oombera's Avatar
Have a day :|
 

Join Date: Aug 2002
Location: Cleveland, OH
Posts: 804
What's the version of your o.s. (run uname -a) and what's the name of your system administration utility?

Maybe it's b/c the program is messing with certain files while not being root..? I found a link on dbforums that talks about a command called asroot. This may be completely off, but if you created the utility, maybe it's running some commands that need to be run as root? Just throwing out ideas here...
Reply With Quote
  #3 (permalink)  
Old 05-30-2003
Registered User
 

Join Date: Sep 2002
Location: New York
Posts: 10
The version is 5.0.6. The utility has been developed inhouse by our techies to restrict usage of root by system
adminsitrators. They have failed in this objective as new doors have been opened for accessing root account. The user ID
for running the utility also has root powers. More worryingly, certain shells of the utility are messing with the following:

1. File permissions of all server files.
2. Certn shells of teh utility are being excecuted daily at system startup which should have been done only at installation of
teh utility.

So the fact that the utility is a disaster is known to us. My question, is the extent of damage it is causing the system. Please share your thoughts
Reply With Quote
  #4 (permalink)  
Old 05-31-2003
Neo's Avatar
Neo Neo is offline
Administrator
 

Join Date: Sep 2000
Location: Asia Pacific
Posts: 4,189
Thoughts:

You have an inhouse developed utility.

Folks on this forum have no knowledge of that inhouse utiliity.

You should go to the developers of your custom utility and get their help.
Reply With Quote
Google UNIX.COM
Reply

Thread Tools
Display Modes




All times are GMT -7. The time now is 09:40 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger Visit The Global Fact Book

Content Relevant URLs by vBSEO 3.2.0