rexec and umask

[ccunix]

We're running a number of trusted systems here.

In the past someone has setup rexec with .netrc to allow code to be executed remotely.

When I logon to all systems and run umask, I get the expected default of 077.

However, when I run the following:

rexec -l umask

Most systems report 00 and one or two report 077.

I have trawled around the machines to try and identify how this is setup, but to no avail.

Has anyone come across anything like this before?

[Peter Godron]

Hi,
welcome to ITRC forums!
Have you had a look in the /etc/default/security file ?

See man 1m rexecd

[Robert-Jan Goossens]

Hi,

# grep umask /etc/init.d/inetd

umask 000

If you change this remembet to start/stop the inet deamon.

# /sbin/init.d/inetd stop
# /sbin/init.d/inetd start

Regards,
Robert-Jan

[Muthukumar_5]

There is two possiblities:

1) /sbin/init.d/inetd startup file to set umask
2) /etc/profile or $HOME/.profile for that remote user to set umask.


rexec -l cat /sbin/init.d/inetd | grep 'umask'

or

/etc/profile or $HOME/.profile

--
Muthu

[ccunix]

Guys,

Many thanks for all your replies. Unfortunately - I've gone through much of what you suggested already.

Peter,

/etc/default/securetty is not set on any of the systems involved.

/etc/securetty is set only to the console.

Robert-Jan,

There is not /etc/init.d/inetd file. I have check /sbin/init.d/inetd and can see a umask setting of 000. However this is consistent across all machines.

Muthu,

umask is not set in /etc/profile or .profile for any of these systems.

Any more suggestions would be much appreciated!!