topic Re: doubt on the permission of /dev/ether0 in Operating System - HP-UX

doubt on the permission of /dev/ether0

Vishal Augustine — Mon, 06 May 2002 11:42:46 GMT

Hi,

My system startup-file - /sbin/init.d/hpbase100 - has the following entry
#######################################
C_MAJOR=$(/usr/sbin/lsdev -h -d btlan3 | awk '{print $1}')

if [ -a /dev/lan0 ]; then
LAN0_MAJOR=$(/bin/ll /dev/lan0 |awk '{print $5}')

if [ $C_MAJOR -ne $LAN0_MAJOR ]; then
/bin/rm /dev/lan0
fi
fi

if [ ! -a /dev/lan0 ]; then

/sbin/mknod /dev/lan0 c $C_MAJOR 0x000000
/usr/bin/chmod 0666 /dev/lan0
fi

if [ -a /dev/ether0 ]; then
ETHER_MAJOR=$(/bin/ll /dev/ether0 |awk '{print $5}')

if [ $C_MAJOR -ne $ETHER_MAJOR ]; then
/bin/rm /dev/ether0
fi
fi

if [ ! -a /dev/ether0 ]; then

/sbin/mknod /dev/ether0 c $C_MAJOR 0x000001
/usr/bin/chmod 0666 /dev/ether0
fi
##########################################

My /dev/ether0 has the permission 0666.

Is this permission really required ? Will it not cause some security issues ?

Thanks and Regards
Visha

Re: doubt on the permission of /dev/ether0

harry d brown jr — Mon, 06 May 2002 11:57:12 GMT

I guess it could cause security issues, but I'm not sure I would change it, especially if this machine is a production machine.

My hpbase100 does not have that for 10.20. What OS are you running?

live free or die
harry

Re: doubt on the permission of /dev/ether0

Victor_5 — Mon, 06 May 2002 12:06:59 GMT

I checked my machine, it is the same permissions, although they have "w" permission which maybe is a security hole, I don't suggest you change them, just leave them there.

Re: doubt on the permission of /dev/ether0

Vishal Augustine — Mon, 06 May 2002 13:08:05 GMT

It is a k580 10.20 system ...

I checked it on other 3 k580, 10.20 and found the same !!!

Vishal

Re: doubt on the permission of /dev/ether0

S.K. Chan — Mon, 06 May 2002 13:25:18 GMT

I noticed all of ours has permission set to ..
crw-r--r-- bin:bin
for both ether0,ether1,lan0 and I couldn't find any chmod statement in the startup file.
I'm suspecting your startup file has the chmod line purposely added to it.
Under normal circumstances there shouldn't be a need for the permission to be world-writable.

Re: doubt on the permission of /dev/ether0

MANOJ SRIVASTAVA — Mon, 06 May 2002 13:31:07 GMT

Hi Vishal

Even we have the same permissions and I am attaching a copy og hpbase100 so that you can cross check it ,there is definaltely a security concern as I am also thinking now on the same lines.

Manoj Srivastava

Re: doubt on the permission of /dev/ether0

MANOJ SRIVASTAVA — Mon, 06 May 2002 13:31:26 GMT

Re: doubt on the permission of /dev/ether0

Pete Randall — Mon, 06 May 2002 13:37:07 GMT

Vishal,

I've checked my N4000 running 11.0, my K570 running 11.0, and my C3000 running 11i. They all have the exactly the same permissions as yours. I would leave them alone.

Pete

Re: doubt on the permission of /dev/ether0

Sridhar Bhaskarla — Mon, 06 May 2002 13:40:57 GMT

I do not know if it is a security concern. An ordinary user cannot remove it but will need to perform write operations in the network stack.

-Sri

Re: doubt on the permission of /dev/ether0

cart — Tue, 07 May 2002 07:08:04 GMT

We've asked our HP support and they told us not to change it...

S

Re: doubt on the permission of /dev/ether0

Vishal Augustine — Wed, 08 May 2002 04:59:20 GMT

But why such permission ... there shud be some reason ? Do you know the reason ?

Vishal