UNIX for Dummies Questions & Answers

Being a system administrator i came across a statement as " Excluding temporary directories /tmp and /var/tmp, no root owned files should be in world writable directories"

While the above statement may look straight forward but how would i check if there are any such directories in the distribution?

---------- Post updated at 06:58 AM ---------- Previous update was at 06:28 AM ----------

I think this will be more appropriate .

Correct me if i m wrong.

Code:

# find / -type d -user root -perm /o=w

Please post the exact complete and total statement from your stated source and state the exact and complete and total list of relevant software you are running in this context and describe in exact and complete and total detail regarding which software is under the spotlight in today's "server hardening" exercise.

Please, please, please do not relay your own understanding of this issue but the complete and total detail of this issue.

Frame the find command, as u require.

Code:

find

Everywhere

Code:

/

Only directories ( if both files dont mention )

Code:

-type d

root owned files

Code:

-user root

permission bits

Code:

-o=w

Can you please elaborate in simple statement?Which software you are talking about.

I m doing linux server hardening regardless of any document but online stuff.
As i m new to linux i m posting it under linux newbie section.Please give me some time to fully understand the environment.
However as you can see i have done something to make it work and here just evaluating whether it is correct or not?

---------- Post updated at 07:07 AM ---------- Previous update was at 07:04 AM ----------

Thanks that was very helpful i will keep this in mind.

But if methyl asked you to be more exact and complete, it certainly not to make a fool of you..As first thing I believe all posters should mention on what architecture they are...
For instance if you let everybody use /var/tmp or /tmp on an HP-UX, you may one day regret... As many root processes write there... and if full...
So I believe more methyl is trying to help you avoid possible issues by missunderstanding...

Thanks vbe.
As professional Systems Administrators we are in the business of accident prevention. As many posters will have noticed I am concerned about Administrators making changes to a system based on information from a website rather than from informed personal knowledge backed with professional training.

---------- Post updated at 16:39 ---------- Previous update was at 16:30 ----------

What worried me most was this:
Imho. In the context of the original post shows no understanding of unix permissions whatsoever. I could be wrong (please feel free to advise).

What is wrong in above command.I just wanted to know the list of directories owned by root and has world writable permission .Is there anything wrong in it?