topic Re: World writable system files in Operating System - HP-UX

World writable system files

Dorothy Lim_1 — Mon, 21 Feb 2000 02:11:40 GMT

Does anyone out there know where I can find the best practice for the above
information ?

I have some auditors questioning on the file permission mode of the system
files.

I would like to be able to do some comparison & then implement the system files
to disallow writable.

Thks

Re: World writable system files

Randy Mather — Thu, 24 Feb 2000 07:35:03 GMT

set the umask to 022 in /etc/profile or the user/.profile

this will create files to 644 permission

look at different umask settings until you come up with
what you want.

Re: World writable system files

Dorothy Lim_1 — Fri, 25 Feb 2000 03:25:14 GMT

Pls help to explain.

I have included umask 027 in the /etc/profile.
When I login as a normal user & create a file,
it shows me:-

rw-r----- testfile

When I changed the umask to 022 in the /etc/profile,
it shows me:-

rw-r--r-- testfile

Why is this it cause ?
I thought a umask setting of 027 means that the permission bit should be
rwxr-x--- & the setting of 022 means rwxr-xr-x.

thks

Re: World writable system files

Dorothy Lim_1 — Fri, 25 Feb 2000 03:25:22 GMT