Date: Sun, 4 Aug 2002 05:10:43 -0700 (PDT) From: Oliver Eikemeier <eikemeier@fillmore-labs.de> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/41309: security check scripts do not delete temporary files when disabled Message-ID: <200208041210.g74CAha1073392@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 41309 >Category: misc >Synopsis: security check scripts do not delete temporary files when disabled >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 04 05:20:02 PDT 2002 >Closed-Date: >Last-Modified: >Originator: Oliver Eikemeier >Release: 4.6-STABLE >Organization: Fillmore Labs <http://www.fillmore-labs.com>; >Environment: FreeBSD cvs.fillmore-labs.com 4.6-STABLE FreeBSD 4.6-STABLE #2: Sat Aug 3 13:28:06 CEST 2002 root@lima.fillmore-labs.com:/usr/obj/usr/src/sys/LIMA i386 >Description: The default security check scripts 100.chksetuid 200.chkmounts 500.ipfwdenied 550.ipfwlimit 600.ip6fwdenied 650.ip6fwlimit 700.kernelmsg (all in /etc/periodic/security) create a temporary file with ' /tmp/security.XXXXXXXXXX', but delete them only when they are enabled. This is especially annoying in a jail, where you have to disable some. >How-To-Repeat: set daily_status_security_chksetuid_enable="NO" daily_status_security_chkmounts_enable="NO" daily_status_security_noamd="NO" daily_status_security_nomfs="NO" daily_status_security_ipfwdenied_enable="NO" daily_status_security_ipfwlimit_enable="NO" daily_status_security_ip6fwdenied_enable="NO" daily_status_security_ip6fwlimit_enable="NO" daily_status_security_kernelmsg_enable="NO" in /etc/periodic.conf, wait 24 hours... >Fix: workaround: set daily_clean_tmps_enable="NO" in periodic.conf fix: change the scripts that the files are only created when needed. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200208041210.g74CAha1073392>