From 1be510f9529cb082f802408b472a77d074b394c0 Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Sun, 14 Apr 2013 13:46:12 +0000 Subject: Add zarb MLs html archives --- .../20111211/b42a4d0b/attachment-0001.html | 25 ++++++++++++++++++++++ .../attachments/20111211/b42a4d0b/attachment.html | 25 ++++++++++++++++++++++ 2 files changed, 50 insertions(+) create mode 100644 zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment-0001.html create mode 100644 zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment.html (limited to 'zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b') diff --git a/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment-0001.html b/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment-0001.html new file mode 100644 index 000000000..9b0e3291f --- /dev/null +++ b/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment-0001.html @@ -0,0 +1,25 @@ +Johnny,

Thank you.  I was able to alter the file and run "msecpaerms -e".

I noticed that a Mandriva System had the same settings, except for an account that I added a long time after install, versus during the install.
+
--Jeff

On Sun, Dec 11, 2011 at 6:44 PM, Johnny A. Solbu <cooker@solbu.net> wrote:
+
On Monday 12 December 2011 03:19, Jeff Robins wrote:
+> Can I safely change the permissions to '700'?
+
+
Sure, but in a minute or so msec may revert the changes.
+
+I would change it in /etc/security/msec/perms.conf (Perhaps /etc/security/msec/perm.local can be used) and run msecperms afterwards.
+===
+/home/*                                          current.current         700
+===
+Then msec will from now on automatically enforce the permissions to what you want.
+(Note: The spaces between the tree fields are TABs in my file, and not spaces. Also, "current.current" means that msec wont change the owner of files and folders. In /home/ you really don't want msec to automatically change ownership of files, or yourt users will be angry :-)= )
+ +
+To get a grasp of some of the currently forced entries and what you can do, look in the various config files in /etc/security/msec/.
+If you have the default security level, the *.standard are the files you want to look into. (I think) "*.local" overrides the default values.
+
+I use this to enforce customized access restrictions on a couple of programs, so the few users who have access to my gateway don't have access to telnet and nmap unless they are members of a special group that I've setup.
+ +
+--
+Johnny A. Solbu
+PGP key ID: 0xFA687324
+

diff --git a/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment.html b/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment.html new file mode 100644 index 000000000..9b0e3291f --- /dev/null +++ b/zarb-ml/mageia-discuss/attachments/20111211/b42a4d0b/attachment.html @@ -0,0 +1,25 @@ +Johnny,

Thank you.  I was able to alter the file and run "msecpaerms -e".

I noticed that a Mandriva System had the same settings, except for an account that I added a long time after install, versus during the install.
+
--Jeff

On Sun, Dec 11, 2011 at 6:44 PM, Johnny A. Solbu <cooker@solbu.net> wrote:
+
On Monday 12 December 2011 03:19, Jeff Robins wrote:
+> Can I safely change the permissions to '700'?
+
+
Sure, but in a minute or so msec may revert the changes.
+
+I would change it in /etc/security/msec/perms.conf (Perhaps /etc/security/msec/perm.local can be used) and run msecperms afterwards.
+===
+/home/*                                          current.current         700
+===
+Then msec will from now on automatically enforce the permissions to what you want.
+(Note: The spaces between the tree fields are TABs in my file, and not spaces. Also, "current.current" means that msec wont change the owner of files and folders. In /home/ you really don't want msec to automatically change ownership of files, or yourt users will be angry :-)= )
+ +
+To get a grasp of some of the currently forced entries and what you can do, look in the various config files in /etc/security/msec/.
+If you have the default security level, the *.standard are the files you want to look into. (I think) "*.local" overrides the default values.
+
+I use this to enforce customized access restrictions on a couple of programs, so the few users who have access to my gateway don't have access to telnet and nmap unless they are members of a special group that I've setup.
+ +
+--
+Johnny A. Solbu
+PGP key ID: 0xFA687324
+

-- cgit v1.2.1