Date: Sat, 5 Oct 2002 13:48:51 -0700 (PDT) From: Holt Grendal <holtor@yahoo.com> To: security@freebsd.org Cc: stable@freebsd.org Subject: Daily Security Output to check GID 0 Message-ID: <20021005204851.89445.qmail@web11606.mail.yahoo.com>
next in thread | raw e-mail | index | archive | help
Would it be possible for someone to get whoever runs the periodic system in freebsd to somehow add a facility that runs in the daily scripts to check users with GID 0 aswell as users with UID 0? Like we have now, only get GID 0 also?: # 300.chkuid0 daily_status_security_chkuid0_enable="YES" I've recently had a machine where some users got ahold of another login who was in /etc/group and got to root and then changed their user groups to 0 and I didnt notice untill checking the master.passwd file line by line. The output would have caught it the day it happened. Would this be possible? TIA Holt __________________________________________________ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021005204851.89445.qmail>