SUMMARY: SU/Security Problem

From: Paul Prada <prada_at_mail.sachem.edu>
Date: Mon, 14 Aug 2000 09:15:04 -0400

Thanks to Nick Multinovic for the response.

Problem:
As an Alpha Manager of a 4100 running DEC Unix 4.0D I ran into an
strange problem where, when I issued an SU command all I got was my
prompt back, no password request, no "Su failed" message, nothing.
It wasn't even logged. In addition, PS and W commands where behaving
strange also.

Solution:
After 15-20 with DEC/Compaq support, it turns out the SU command (along
with PS, W and /usr/bin) had 777 file permission (which I never
noticed). I ran a tcl script called allverify2.tcl which had been given
to me previously by Compaq support and specifically designed to restore
all system file permissions to their appropriate, original settings.
Once I ran the script with the repair option everything was running
good.
I already had the file on the system but was told it was on the
freeware
CD that comes with the system.

Special thanks to Jan Colburn, Compaq Services
-- 
Paul Prada
Lan/System Manager
Sachem School District
prada_at_sachem.edu
(631) 471-8900
-- 
Paul Prada
Lan/System Manager
Sachem School District
prada_at_sachem.edu
(631) 471-8900
Received on Mon Aug 14 2000 - 13:21:00 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:41 NZDT