bastille and chmod!!

[astra]

Hello All,

Is there any configuration parameter in bastille configuraton file, which enforces the control (permissions) on chmod to specified users only?

Thanks in advance,

Regards,
Amit

[Steven Schweda · Accepted solution]

I know nothing, but the "man" page:

http://www.docs.hp.com/en/B2355-60130/bastille.1M.html

says:

DESCRIPTION

Bastille is a system-hardening/lockdown
program that enhances the security of a Unix
host. It configures daemons, system settings
and firewalls to be more secure. [...]


"chmod" wouldn't seem to fall into those
categories. Generally, a file's owner (or
"root") gets to decide that file's
permissions. (Don't they?) You may be able
to get what you want using ACLs, but it's not
clear (to me) exactly what you want. Exactly
what _do_ you want?

[astra]

Hi,

Thanks for your reply.

Actually i want to know that whether, bastille modifies the permission on "chmod"?

Regards,
Amit

[Steven Schweda]

> Actually i want to know that whether,
> bastille modifies the permission on "chmod"?

Why would it? Why would you want to do that?

Is there some actual problem which you are
trying to solve? If so, then perhaps it
would make more sense to describe that
problem, rather than to ask vague questions
about some software which may or may not be
able to solve that problem.

[astra]

Hi Steven,

Thanks for your kind reply and support.

Regards,

[astra]

Just wanted to confirm.

[dirk dierickx]

bastille is also open source, so you can search the code to find out anything it does.

if i remember correctly it's written in perl, so it's not that hard to figure out.