SECURITY: Mandrake 8.1 prints security check info to tty's


Subject: SECURITY: Mandrake 8.1 prints security check info to tty's
From: Joshua J.Kugler (isd@as.uaf.edu)
Date: Thu Feb 21 2002 - 10:15:49 AKST


This morning, a user alerted me to the fact that the check for world writable
files on a Mandrake 8.1 server had output its log to the SSH tty he was
logged in to. I dug around a bit and found that this is a configuration
switch and disabled it. While I don't suppose that is is necessarily a bad
thing, I do believe it should be disabled by default, especially on a
security level five installation. I don't know if this has changed in
8.2beta, but I hope it has.

Civileme?

Thanks.

j----- k-----

-- 
Joshua Kugler, Information Services Director
Associated Students of the University of Alaska Fairbanks
isd@asuaf.org, 907-474-7601



This archive was generated by hypermail 2a23 : Thu Feb 21 2002 - 10:19:20 AKST