Subject: SECURITY: Mandrake 8.1 prints security check info to tty's
From: Joshua J.Kugler (isd@as.uaf.edu)
Date: Thu Feb 21 2002 - 10:15:49 AKST
This morning, a user alerted me to the fact that the check for world writable
files on a Mandrake 8.1 server had output its log to the SSH tty he was
logged in to. I dug around a bit and found that this is a configuration
switch and disabled it. While I don't suppose that is is necessarily a bad
thing, I do believe it should be disabled by default, especially on a
security level five installation. I don't know if this has changed in
8.2beta, but I hope it has.
Civileme?
Thanks.
j----- k-----
-- Joshua Kugler, Information Services Director Associated Students of the University of Alaska Fairbanks isd@asuaf.org, 907-474-7601
This archive was generated by hypermail 2a23 : Thu Feb 21 2002 - 10:19:20 AKST