change permisions to .profile file

[Edwin Ruiz_2]

Hi. i am scaning my systems with HP-UX and i want to change owner to .profile and /etc/profile. Actually are bin:bin and i want root:root for security. Can i do that? i wont hve futures problems with HP-Ux?

Thanks

[doug mielke]

I'm not sure there will be a security gain, and I've never changed perms on a profile.

As root you should have the ability to run chown on any file you like, including profiles.

chown root /etc/profile

However, if this were to cause a problem, it could potentialy be huge. I'd try on a test system 1st.

[Patrick Wallek]

My /etc/profile is owned by bin:bin and the permissions are -r--r--r--. You really won't get any more secure by changeing the owner. Having bin is probably more secure since you can't log in as bin directly, although root can still change the file. If the permissions on /etc/profile are anything other than -r--r--r-- then you should change it. There's no reason for anyone to have write access to it.

root's .profile file should be owned by root and the permissions should really be -r--------.

[doug mielke]

forgot the
chgrp root /etc/profile