|
| [SMS] - Superb Mini Server Project Support Forum |
 |
| |
  |
| View previous topic :: View next topic |
| Author |
Message |
keopp
Senior Member
Joined: 08 Nov 2008
Posts: 166
Location: Romania
|
 Posted: Thu Oct 17, 2013 7:21 pm Post subject: Difference between SMS64 1.6.5 and 2.0.5 |
 |
|
Hello,
While configuring a fresh SMS64 2.0.5 installation I saw the following difference from SMS64 1.6.5.(see attached files) regarding ownership of the [..]
Is it safe?
Thank you.
| Description: |
|
| Filesize: |
56.07 KB |
| Viewed: |
2542 Time(s) |
|
| Description: |
|
| Filesize: |
54.23 KB |
| Viewed: |
2518 Time(s) |
|
|
|
| Back to top |
|
gerasimos_h
Site Admin
Joined: 09 Aug 2007
Posts: 1757
Location: Greece
|
| Posted: Thu Oct 17, 2013 8:36 pm Post subject: |
|
|
Hello,
well some files are copied through samba in the past while I was creating the x86_64 branch, so that's the reason nobody:nogroup permissions exist, although newer package is fixed
| Code: | drwxrwxrwx root/root 0 2011-03-22 20:40 etc/dovecot/
-rwxr--r-- root/root 116 2011-03-22 20:40 etc/dovecot/README
-rwxr--r-- root/root 635 2011-03-22 20:40 etc/dovecot/dovecot-egroupware.conf
-rwxr--r-- root/root 3685 2011-03-22 20:40 etc/dovecot/dovecot-example.conf
-rwxr--r-- root/root 461 2011-03-22 20:40 etc/dovecot/dovecot-ldap-egroupware.conf
-rwxr--r-- root/root 5187 2011-03-22 20:40 etc/dovecot/dovecot-ldap-example.conf
-rwxr--r-- root/root 441 2011-03-22 20:40 etc/dovecot/dovecot-ldap.conf.new
-rwxr--r-- root/root 4625 2011-03-22 20:40 etc/dovecot/dovecot-sql-example.conf
-rwxr--r-- root/root 687 2011-09-18 20:13 etc/dovecot/dovecot.conf.new
|
But you might found other as well like clamav package or even samba as far as I see
| Code: | drwxr-xr-x nobody/nogroup 0 2010-06-19 12:42 etc/
drwxr-xr-x nobody/nogroup 0 2010-06-19 12:42 etc/rc.d/
-rwxr--r-- nobody/nogroup 1241 2013-10-16 18:59 etc/rc.d/rc.samba.new
drwxr-xr-x nobody/nogroup 0 2010-06-19 12:42 etc/samba/
drwxr-xr-x nobody/nogroup 0 2010-06-19 12:42 etc/samba/private/
-rwxr--r-- nobody/nogroup 8192 2010-05-30 16:40 etc/samba/private/secrets.tdb
-rwxr--r-- nobody/nogroup 0 2010-05-30 16:40 etc/samba/private/smbpasswd
-rwxr--r-- nobody/nogroup 9672 2010-05-30 16:40 etc/samba/smb.conf-sample
-rwxr--r-- nobody/nogroup 1632 2013-10-16 18:59 etc/samba/smb.conf.new |
Now about security, files are still have read only permissions, and nobody has no shell...
Since most likely you don't have other users on server machine like standard users (administrator is a sudoer anyway) there is no risk...
If someone have access as a user, could do some damage, running a script or a webserver as nobody and manipulate the files...
A quick fix is doing a
| Code: | | find /etc -user nobody -exec chown root:root {} \; |
I'll rebuilt packages ASAP and fix my builds...
Thanks for the bug report...
gerasimos_h
_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com |
|
| Back to top |
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum
|
|
 |
 |
SMS - Superb! Mini Server Project © 2016
Powered by phpBB © 2001, 2002 phpBB Group
iCGstation v1.0 Template By Ray © 2003, 2004 iOptional
|
 |
|
|
