topic Re: Permissions on Iexpress sudoers file is 0644? in Operating System - HP-UX

Permissions on Iexpress sudoers file is 0644?

Craig Johnson_1 — Mon, 23 Oct 2006 14:40:39 GMT

Why? That isn't right - certainly not secure. Why was it done that way?

Sudo A.05.00-1.6.8p9 Super User Do

Re: Permissions on Iexpress sudoers file is 0644?

Calandrello — Mon, 23 Oct 2006 14:54:17 GMT

Friend
the permission correct is :
-r--r----- 1 bin bin 652 Jul 27 09:42 sudoers

Re: Permissions on Iexpress sudoers file is 0644?

Patrick Wallek — Mon, 23 Oct 2006 15:30:51 GMT

It MUST be 644 permissions. If you change it to 640 sudo will complain that it must be 644 and sudo will not work. It is probably that way so that it can be read by a normal user to determine if that user has privileges defined in sudo.

Yes, that is world readable, but insecure? Well, MAYBE. At least it is not world-writeable.

Re: Permissions on Iexpress sudoers file is 0644?

Craig Johnson_1 — Mon, 23 Oct 2006 15:38:44 GMT

sudoers has always been 440 until I grabbed this package off the Iexpress CD.

I think somebody may have compiled it wrong.

Does anyone know if it breaks in on HP 11.11 if you recompile it with 440 permissiosn specified (the right way)?

Otherwise I'm just gonna copy it from another working server.

Re: Permissions on Iexpress sudoers file is 0644?

Craig Johnson_1 — Tue, 24 Oct 2006 08:23:47 GMT

Anybody?

Re: Permissions on Iexpress sudoers file is 0644?

Craig Johnson_1 — Tue, 24 Oct 2006 10:33:01 GMT

I have decided to try and compile it but am having a problem with configure. Please see my other thread about that.

I called HP about sudo and they say the Iexpress CD is just a convenience and they don't support it. Great.

Re: Permissions on Iexpress sudoers file is 0644?

Heironimus — Wed, 25 Oct 2006 10:18:25 GMT

Have you checked the latest version (A.07.00-1.6.8p12) from HP's Internet Express site?

Re: Permissions on Iexpress sudoers file is 0644?

Craig Johnson_1 — Thu, 26 Oct 2006 08:58:20 GMT

No, has it been corrected? As I said, I recompiled it instead.