Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 11 Mar 2001 17:35:16 +1300
From:      "Dan Langille" <dan@langille.org>
To:        security@freebsd.org
Cc:        dan@langille.org
Subject:   temp files for security/logcheck
Message-ID:  <200103110435.f2B4ZHw04676@ns1.unixathome.org>

next in thread | raw e-mail | index | archive | help
The port security/logcheck creates /usr/local/etc/tmp[1] and chmod's it 
to  700.  It does that because the temp files it creates and uses need to 
be relativly secure.  It writes out several files that could cause problems 
if a user made links, etc.

Does anyone see any issues which we need to deal with?  e.g. the 
security of this directory, the name of this directory...

[1] - Prior to a recent port change, it used /usr/local/etc/tmp

-- 
Dan Langille
pgpkey - finger dan@unixathome.org | http://unixathome.org/finger.php
got any work?  I'm looking for some.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103110435.f2B4ZHw04676>