![]() |
|
|
|
|
|||||||
| Forums | Portal | Register | Rules & FAQ | Contribute | Members List | Arcade | Search | Today's Posts | Mark Forums Read |
| UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !! |
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Bastille: classic Linux and Unix security - Help Net Security | iBot | UNIX and Linux RSS News | 0 | 10-09-2007 05:40 AM |
| One Question about security | tayyabq8 | Security | 9 | 05-22-2006 07:56 AM |
| security question | blanks | UNIX for Dummies Questions & Answers | 0 | 03-01-2005 09:33 AM |
| PostFix security question | fundidor | UNIX for Dummies Questions & Answers | 3 | 06-06-2004 08:46 PM |
| Unix Security | DuttO | UNIX Desktop for Dummies Questions & Answers | 1 | 03-22-2002 08:41 AM |
|
|
LinkBack | Thread Tools | Display Modes |
|
|||
|
UNIX Security Question
Can other users delete / replace this file if the directory and file have the following permissions
/test drwxrwxrwx /test/file _rw_r__r__ I guess what I really want to know is what the security riskis of having teh directory completely open when the access to a particular file is restricted. Any help would be much appreciated. Thanks |
| Forum Sponsor | ||
|
|
|
||||
|
Yes - see this post about directory permissions.
|
|
|||
|
Thanks,
this really helps! Are there any known security restrictions that would prevent anyone from deleting the etc/passwd file and replacing it with one where the root password would be known if the permissions on the /etc directory were 777 or drwxrwxrwx ? Given your response to the previous question I would suspect that one could get away with this if the permissions were not set correctly. I want to lock down the permissions on the etc directory but cannot because there are scripts that run and require etc to have these permissions. I need to convince my manager that we need to be given time and budget to change this around, but I don't want to try and delete the passwd file just to prove my point to him. |