Public SourceMage Discussion List

[Jason Flatt <jason AT flattfamily.com>]

On Monday 24 May 2004 9:23 am, Seth Alan Woolley wrote:
> On Mon, May 24, 2004 at 08:31:30AM -0700, Eric Sandall wrote:
> > Quoting Seth Alan Woolley <seth AT positivism.org>:
> > > On Mon, May 24, 2004 at 04:27:30PM +0200, Vladim?r Marek wrote:
> > > > Was only mine and ruskie's /etc/shadow set to rw-r--r-- permissions,
> > > > or is it widespread SM 'feature' ? :)
> > >
> > > $ ls -l /etc/shadow
> > > -r--------  1 root root 1992 May 21 15:05 /etc/shadow
> > >
> > > which ISO and version of shadow are you using?
> >
> > Installed from latest ISO (2.6.5 20040414) with shadow 4.0.4.1:
> >
> > $ l /etc/shadow
> > -rw-r--r--  1 root root 1.2K 2004-05-14 09:57 /etc/shadow
>
> root@sourcemage2:~# cat /etc/issue
> Welcome on Source Mage GNU/\s 0.9.1 \l
> root@sourcemage2:~# ls -l /etc/shadow
> -rw-r--r--  1 root root 815 Mar  8 16:40 /etc/shadow
>
> I'm guessing what happened is that the ISO included an /etc/shadow that
> was 644 instead of 400 and it got copied over like that.  Perhaps the
> shadow spell never sets permissions if the file already exists.  Appears
> to be a problem with Hamish's ISO sets.
>
> I just edited the ISO installer script to set the perms to 400 after it
> sets the root password.  I advise everybody to chmod 400 /etc/shadow on
> all their machines.
>
> Seth

I just checked mine and found it lacking as well.  I haven't done a fresh 
install in almost a year, so I'm not sure that the blame is entirely on the 
ISO.

jason@jason:~$ ll /etc/sh*
-rw-r--r--  1 root root 1167 Mar 31 14:18 /etc/shadow
-rw-------  1 root root 1142 Mar 27 19:22 /etc/shadow-

-- 
Jason Flatt (jason @ flattfamily . com)
Father of five (http://www.flattfamily.com/)
Linux user (http://www.sourcemage.org/)
IRC Nick: Oadae  Channels: #sourcemage, #lvlug  Server: irc.freenode.net

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS/IT d(-) s+:- a>++++ C++$(+++) UL++++ P(+) L+++ E- W++ N+@ o? K? w-- O? 
M-- V PS- PE+ Y+ PGP@ t 5+ X R tv--() b+@ DI+@ D+++ G e h---- r+++ y++++
------END GEEK CODE BLOCK------