Comments on Funtoo by Daniel Robbins: Baselayout /etc/shadow local vulnerability

Thanks for this Daniel, much appricate the work yo...

2009-03-19T09:14:00.000-06:00

Thanks for this Daniel, much appricate the work you are doing on funtoo

I've added a first round of security checks that w...

2009-03-05T23:19:00.000-07:00

I've added a first round of security checks that will detect if /etc/shadow and a few other critical files and directories have incorrect permissions.

Good you're keeping and eye on things. Thanks!

2009-03-05T19:08:00.000-07:00

Good you're keeping and eye on things. Thanks!

You are a Crack! ;)

2009-03-04T12:15:00.000-07:00

You are a Crack! ;)

Fixed. Thanks :)

2009-03-02T20:41:00.000-07:00

Fixed. Thanks :)

actually chmod 0600 /etc/shadow (like what you cha...

2009-03-02T20:21:00.000-07:00

actually chmod 0600 /etc/shadow (like what you changed in the ebuild) is appropriate.

in theory chmod ugo-r could leave write or executable permissions on files that shouldn't have it. also why do you want to remove read from the 'user' or 'owner' permission (e.g the u in ugo). given that it's owned by root it doesn't affect a thing, but in a sense that's still improper.