02-29-2008
Recursively find and change Permissions on Man pages
Just joined after using the site as a guest.. (Very Good Stuff in here.. thanks folks.)
I am in the process of hardening a Solaris 10 server using JASS. I also must use DISA Security Checklists (SRR) scripts to test for things that did not get hardened to DISA standards.
One of the things missing is a script that would change all of the permissions on various man pages to be no more permisive than 644.
I know I can do it by manually finding and changing them, but it would be great if someone allready had a script in place.
Thanks again for a great place to browse and learn.
Altamaha
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hello ,
I just installed openssh in my system . I actually tried to man sshd but it says no entry , though there is a man directory in the installation which have the man pages for sshd .
Can anyone tell me how should i install these man pages .
DP (2 Replies)
Discussion started by: DPAI
2 Replies
2. UNIX for Dummies Questions & Answers
Hi,
I've written now a man pages, but I don't knwo how to get 'man' to view them. Where have I to put this files, which directories are allowed??
THX Bensky (3 Replies)
Discussion started by: bensky
3 Replies
3. UNIX for Dummies Questions & Answers
Hi folks,
I want to know all the commands for which man pages are available. How do i get it?
Cheers,
Nisha (4 Replies)
Discussion started by: Nisha
4 Replies
4. UNIX for Dummies Questions & Answers
When reading man pages, I notice that sometimes commands are follwed by a number enclosed in parenthesis. such as:
mkdir calls the mkdir(2) system call.
What exactly does this mean? (4 Replies)
Discussion started by: dangral
4 Replies
5. UNIX for Dummies Questions & Answers
can anybody explain me how to read unix
man pages?
for example when i want to get information about ps command
man ps gives me this output:
***********************************
Reformatting page. Please wait... completed
ps(1) ... (2 Replies)
Discussion started by: gfhgfnhhn
2 Replies
6. Solaris
Hi,
I am using solaris. I have to load the some man pages on different node from solaris. I have no basic idea regarding this. can anyone plz give me some basic ideas so that i can proceed.
Thanks in advance. (3 Replies)
Discussion started by: ravi rajeev
3 Replies
7. UNIX for Advanced & Expert Users
Hi there,
I need to change all files/dirs
1. all files with 744
2. all dirs with 755
is there a script for that ?
thanks,
thegunman (13 Replies)
Discussion started by: TheGunMan
13 Replies
8. Solaris
Hi everyone,
I have a small query, in solaris the man pages get displayed on half of the terminal , can i get a full terminal or full screen display ?:) (2 Replies)
Discussion started by: M.Choudhury
2 Replies
9. HP-UX
Can anyone supply me with the man pages for:
omnidatalist
omnibarlist
omnisap.exe
I prefer the source man pages in nroff format.
A clue about the software bundles which supply these man pages is fine as well.
OS: HP-UX
TIA (11 Replies)
Discussion started by: sb008
11 Replies
10. Shell Programming and Scripting
"how to see the man pages related to pthreads". while executing the command man pthread_t . im getting the following error!!!!!
No manual entry for pthread. (3 Replies)
Discussion started by: Muthukumar U
3 Replies
LEARN ABOUT DEBIAN
hardened-cc
HARDENED-CC(1) Debian GNU/Linux HARDENED-CC(1)
NAME
hardened-cc - gcc wrapper to enforce hardening toolchain improvements
SYNOPSIS
export DEB_BUILD_HARDENING=1
gcc ...
DESCRIPTION
The hardened-cc wrapper is normally used by calling gcc as usual when DEB_BUILD_HARDENING is set to 1. It will configure the necessary
toolchain hardening features. By default, all features are enabled. If a given feature does not work correctly and needs to be disabled,
the corresponding environment variables mentioned below can be set to 0.
ENVIRONMENT
DEB_BUILD_HARDENING=1
Enable hardening features.
DEB_BUILD_HARDENING_DEBUG=1
Print the full resulting gcc command line to STDERR before calling gcc.
DEB_BUILD_HARDENING_STACKPROTECTOR=0
Disable stack overflow protection. See README.Debian for details.
DEB_BUILD_HARDENING_RELRO=0
Disable read-only linker sections. See README.Debian for details.
DEB_BUILD_HARDENING_FORTIFY=0
Don't fortify several standard functions. See README.Debian for details.
DEB_BUILD_HARDENING_PIE=0
Don't build position independent executables. See README.Debian for details.
DEB_BUILD_HARDENING_FORMAT=0
Disable unsafe format string usage errors. See README.Debian for details.
NOTES
System-wide settings can be added to /etc/hardening-wrapper.conf, one per line.
The real gcc symlinks are renamed gcc.real, and a diversion is registered with dpkg-divert(1). Thus hardened-cc's idea of the default gcc
is dictated by whatever package installed /usr/bin/gcc.
SEE ALSO
hardened-ld(1) gcc(1)
Debian Project 2008-01-08 HARDENED-CC(1)