Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Jul 2001 13:03:47 -0500
From:      Ryan <ryanpek@swbell.net>
To:        security@freebsd.org
Subject:   FreeBSD 4.3 local root PREVENTIONS
Message-ID:  <002401c10afc$ffcc9b00$45d8db40@mhx800>
References:  <657B20E93E93D4118F9700D0B73CE3EA02FFEFB7@goofy.epylon.lan> <005701c10af9$bd7a7c20$0200000a@kilmarnock>

next in thread | previous in thread | raw e-mail | index | archive | help
another extra thing you can do is set the permissions on /bin/
like I have everything in there chmod 111

which would prevent copying
bash-2.05$ cp /bin/sh /tmp/
cp: /bin/sh: Permission denied

So simple things like going into all the folders and chmod'n things is a
very good idea for a lil extra security.

along with copying /bin/sh to /tmp/
and chmod 0 /tmp/sh

Ryan
ryanpek@swbell.net



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002401c10afc$ffcc9b00$45d8db40>