[gentoo-dev] Gentoo Linux Security Guide

[Daniel Schroeter]

Hi

I have been using your guide and first thing to say: It is very good! 
But I've also some ideas of improvement and questions.

Daniel Schröter 

-Suidfiles
The script works very well, but the output may confuse a little bit.
Why not putting this (from the gentoo-mailinglist) into the guide to avoid confusion or even change the script to not show directories?
**begin quote
On Wed, 2002-10-02 at 02:51, isaac gouy wrote:
> After 1.4.1_rc1 rebuild
> using this from the Gentoo Linux Security Guide shows
> 199 SUID/SGID files
>
> /usr/bin/find / -type f \( -perm -004000 -o -perm
> -002000 \) -exec ls -lg {} \; 2>/dev/null
> >suidfiles.txt
>
> Most of the files are in /var/cache/edb/dep/
> Can they be deleted?
No .. if you look closely its not files but directories .. and
directories with the suid bit only means that it inherrits the
permissions.
**end quote

-/etc/login.defs 
According to the guide I should set LOG_OK_LOGINS to yes. This gives me an errormessage:
"configuration error - unknown itme 'LOG_OK_LOGINS' ...
and I can't find this option in man login.defs... Did this option just exist in older versions or have I made some mistake??


-/etc/init/procparam
In newer gentoo-releases /proc and everything inside has no write permission (555) ->update the script
(I know this looks nasty! I hope there is a better solution)
/bin/chmod 755 /proc
/bin/chmod 755 /proc/sys
/bin/chmod 755 /proc/sys/net -R
...
/bin/chmod 555 /proc/sys/net -R
/bin/chmod 555 /proc/sys
/bin/chmod 555 /proc


-Possible spelling-mistake
9.FAQ
Answars and questions -> Answers and...

--
gentoo-dev@g.o mailing list