topic Re: netstat -a in Operating System - HP-UX

netstat -a

Bernard Bravo — Sun, 13 Jan 2002 14:54:19 GMT

Hi,

I have a user that needs an execute permission for this command. I already provided the proper execute permission on the program and directory where netstat resides.
Are there devices or files that should be set for me to able to let the user execute the 'netstat -a'.

thanks ..hope guro's could help me on this.

bernard

Re: netstat -a

Sridhar Bhaskarla — Sun, 13 Jan 2002 15:07:17 GMT

Hi,

Users should be able to execute netstat without any problems.

The following are the default permissions

-r-xr-sr-x 1 bin sys 131072 Jan 28 1999 /usr/bin/netstat

And it should work if you too have the same.

What error are they getting?.

-Sri

Re: netstat -a

Helen French — Sun, 13 Jan 2002 19:59:36 GMT

Hi,

Normal users will be able to use the netstat command without any problems. Did you check up whether it's a permission issue or Network issue ?

HTH,
Shiju

Re: netstat -a

John Dvorchak — Thu, 24 Jan 2002 05:51:46 GMT

Since you didn't tell us the error that the user is getting, could it be that /usr/bin is not in their path?

Re: netstat -a

Ravi_8 — Thu, 24 Jan 2002 06:02:07 GMT

Hi,
In all my systems. all users able to execute netstat

all my system has netstat like this

-r-xr-sr-x 1 bin sys 86016 Jun 10 1996 netstat

Re: netstat -a

Bernard Bravo — Thu, 24 Jan 2002 09:44:52 GMT

Hi,

Here is the permission set for the program.

-rwxrwsrwx 2 bin sys 122880 Apr 13 1999 netstat.

Is there services or files that I need to check which is used by netstat?

please advise.

thanks.

bern

Re: netstat -a

Steven Sim Kok Leong — Thu, 24 Jan 2002 09:55:42 GMT

Hi,

Full access permissions is NOT the permissions you want to give netstat. What is someone replaces the binary with his own and compromises your system security?

I agree with John. It could be your path settings. Check by executing:

# echo $PATH

Is /usr/bin in your path?

As also mentioned above, please post your error message to allow us to pinpoint the cause of your problem better.

From the security perspective, I would suggest that you perform a checksum check on the netstat binary. If not, check the time and size of the binary. Because, it might already have been compromised, such as by a rootkit exploit.

Hope this helps. Regards.

Steven Sim Kok Leong