I want to periodically check if ASCII password/config files on Unix have 400 or 600 access. Folders and files are owned by designated group and user. Folders and Files do not have world write access.
Are there any tools/scripts available for this kind of auditing that I can use on Solaris? (7 Replies)
I read somewhere that you should make sure Apache is configured to not allow symbolic links to be followed outside the webroot, as this can compromise security.
I can imagine how this could lead to a security risk:
eg:
Is my assumption correct? -- Is it nothing more than: "its just... (0 Replies)
Hi,
I am doing a services audit on one of our servers at work and I notice that I sometimes have a service with two slightly different prefixes. For example,
S94httpd
K15httpd
Can one of them be safely deleted? (2 Replies)
fslint-gui(1) User Commands fslint-gui(1)NAME
fslint-gui - A GUI wrapper for the individual fslint command line tools
SYNOPSIS
fslint-gui [OPTIONS] [PATHS]
DESCRIPTION
fslint is a toolset to find various problems with filesystems, including duplicate files and problematic filenames etc.
Individual command line tools are available in addition to the GUI and to access them, one can change to, or add to $PATH the
/usr/share/fslint/fslint directory on a standard install. Each of these commands in that directory have a --help option which further
details its parameters.
findup - find DUPlicate files
findnl - find Name Lint (problems with filenames)
findu8 - find filenames with invalid utf8 encoding
findbl - find Bad Links (various problems with symlinks)
findsn - find Same Name (problems with clashing names)
finded - find Empty Directories
findid - find files with dead user IDs
findns - find Non Stripped executables
findrs - find Redundant Whitespace in files
findtf - find Temporary Files
findul - find possibly Unused Libraries
zipdir - Reclaim wasted space in ext2 directory entries
PARAMETERS
If [PATHS] are specified, they become the default search path, otherwise the current directory becomes the default.
--version
Display the fslint version and exit
--help Display help for tool specific options
AUTHOR
Written by Padraig Brady
REPORTING BUGS
Report bugs to <P@draigBrady.com>.
COPYRIGHT
Copyright (C) 2000-2009 Padraig Brady <P@draigBrady.com>.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MER-
CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details, which is available at www.gnu.org
fslint July 2009 fslint-gui(1)