chmod 777 security risks? Post: 302097325

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers chmod 777 security risks? Post 302097325 by reborg on Thursday 23rd of November 2006 09:19:26 AM

11-23-2006

Administrator Emeritus

The point we are making is this:

With chmod 777, you are giving all rights on all the files to ANY user.

Lets say a hacker managed to find an exploit which allows him to gain some kind of access to your server through a vulnerable service, which allows him to execute code as the user of the service.

If the last 6/7 is there it means he can change your files regardless of which user he gets access as. (The keys are in the car)

With the second 6/7 if means that anyone in the group can change the files. (You given someone the valet key to the car)

With only the first 6/7 you (the owner) only can make the changes. ( the key to the car is in your pocket)

So as you can see, someone malicious has more to do in each case, before they can change your files.

reborg

View Public Profile for reborg

Find all posts by reborg

7 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

chmod 777 on all directories below...how do I do that using the "find" command?

I've got 100 directories that each have 2 directories with in them. Structered like this: /home/domains/domain1/ through to /home/domains/domain100/ and those 2 directories mentioned above are here: /home/domains/domain1/directory1/ /home/domains/domain1/directory2/ through to...

2. Solaris

chmod -R 777 in /usr Solaris 9 = Major Screwup

Hello Everyone: One of our admins here accidently ran chmod -R 777 in the /usr folder on a V440 running Solaris 9. After that no one could run any command and could not login. I fixed most of the things by re-restricting some rights and applying the correct rights. Now there is a problem...

3. UNIX for Dummies Questions & Answers

chmod 777 * - oops

I can belive I really did this... chmod 777 /home :eek: I have my /home directory synced to another machine. Can anyone tell me how to get the permissions from back up server /home to production server /home It's important that I dont over write the files on the...

4. Cybersecurity

can another user 777 and existing 777 dirctory?

User usrA creates dirA directory and runs chmod 777 on the directory. Can usrB issue another 777 on dirA? It appears the answer is no even if the usrA and usrB are part of the same group. I know this is a rare scenario but I just ran across it and found out that usrB receives an error when...

5. UNIX and Linux Applications

What is the difference between chmod in solaris and chmod in Linux?

i think it is the same in both... Iam i right?

6. Windows & DOS: Issues & Discussions

chmod -R 777 * in cygwin

Hello, I use windows XP on a small server. Lately I downloaded a software (hydrological computation) which asked me to install as well the software �cygwin' (kind of linux in windows environment) and then to perform in cygwin window the command: �chmod -R 777 *' in order to give writings...

7. UNIX for Dummies Questions & Answers

Only allowing chmod 777 for file upload folder

Hey everyone. I have 2 different linux servers (each one is through a different web hosting company). On both servers I have the exact same PHP file upload script that allows users to upload a file or image to the server (everything on both servers is identical). On server #1 the "attachments"...

LEARN ABOUT DEBIAN

runit-init

runit-init(8)						      System Manager's Manual						     runit-init(8)

NAME

       init - a UNIX process no 1

SYNOPSIS

       init [ 0 | 6 ]

DESCRIPTION

       runit-init is the first process the kernel starts.  If runit-init is started as process no 1, it runs and replaces itself with runit(8).

       If runit-init is started while the system is up, it must be either called as init 0 or init 6:

       init 0 tells  the  Unix	process  no 1 to shutdown and halt the system.	To signal runit(8) the system halt request, runit-init removes all
	      permissions of the file /etc/runit/reboot (chmod 0), and sets the execute by owner permission of the file  /etc/runit/stopit  (chmod
	      100).  Then a CONT signal is sent to runit(8).

       init 6 tells  the  Unix	process no 1 to shutdown and reboot the system.  To signal runit(8) the system reboot request, runit-init sets the
	      execute by owner permission of the files /etc/runit/reboot and /etc/runit/stopit	(chmod	100).  Then  a	CONT  signal  is  sent	to
	      runit(8).

EXIT CODES

       runit-init returns 111 on error, 0 in all other cases.

SEE ALSO

       runit(8), runsvdir(8), runsvchdir(8), sv(8), runsv(8), chpst(8), utmpset(8), svlogd(8)

       http://smarden.org/runit/

AUTHOR

       Gerrit Pape <pape@smarden.org>

																     runit-init(8)