Date: Tue, 7 Jul 1998 12:32:44 -0400 (EDT) From: nathan@rtfm.net To: FreeBSD-gnats-submit@FreeBSD.ORG, Joe Greco <jgreco@ns.sol.net> Subject: ports/7197: root's home incorrect in tripwire default config Message-ID: <199807071632.MAA20346@limbo.rtfm.net>
next in thread | raw e-mail | index | archive | help
>Number: 7197
>Category: ports
>Synopsis: root's home incorrect in tripwire default config
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Jul 7 09:40:01 PDT 1998
>Last-Modified:
>Originator: Nathan Dorfman <nathan@rtfm.net>
>Organization:
RTFM.net
>Release: FreeBSD 3.0-CURRENT i386
>Environment:
FreeBSD limbo 3.0-CURRENT FreeBSD 3.0-CURRENT #9: Wed Jul 1 00:54:13 EDT 1998
nathan@limbo:/usr/src/sys/compile/LIMBO i386
>Description:
The default tripwire configuration file for FreeBSD (in
work/tripwire-1.2/configs/tw.conf.freebsd2) seems to assume / as
root's home directory. It checks for dotfiles there. These files
don't exist, and will generate errors in integrity check mode. The
problem is that the *real* files in /root don't get checked.
>How-To-Repeat:
Install the tripwire port, and generate, then check a database
using the default configuration.
>Fix:
75,81s/^/\/root/ - patch included because, frankly, I need
to pass the time :\
*** tw.conf.freebsd2 Tue May 12 22:03:19 1998
--- tw.conf.freebsd2.n Tue Jul 7 12:20:57 1998
***************
*** 72,84 ****
# First, root's "home"
=/ L
! /.rhosts R # may not exist
! /.profile R # may not exist
! /.cshrc R # may not exist
! /.login R # may not exist
! /.exrc R # may not exist
! /.logout R # may not exist
! /.forward R # may not exist
# Unix itself
/kernel R
--- 72,84 ----
# First, root's "home"
=/ L
! /root/.rhosts R # may not exist
! /root/.profile R # may not exist
! /root/.cshrc R # may not exist
! /root/.login R # may not exist
! /root/.exrc R # may not exist
! /root/.logout R # may not exist
! /root/.forward R # may not exist
# Unix itself
/kernel R
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807071632.MAA20346>