LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-27-2012, 05:46 PM   #1
masuch
Member
 
Registered: Sep 2011
Location: /dev/null
Distribution: ubuntu 64bits
Posts: 135

Rep: Reputation: 1
ufw status world writeable group writeable


Hi,

ufw status:

WARN: /etc/ufw/applications.d/apache2.2-common is world writable!
WARN: /etc/ufw/applications.d/apache2.2-common is group writable!
WARN: /etc/ufw/applications.d/bind9 is world writable!
WARN: /etc/ufw/applications.d/bind9 is group writable!
WARN: /etc/ufw/applications.d/samba is world writable!
WARN: /etc/ufw/applications.d/samba is group writable!

is it enough to correct this error by:
sudo chmod 755 /etc/ufw/applications.d/bind9
sudo chmod 755 /etc/ufw/applications.d/samba
sudo chmod 755 /etc/ufw/applications.d/apache2.2-common

or do i need to do some more ?

thank you,
regards,
M.
 
Old 02-28-2012, 09:18 AM   #2
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Ubuntu 10.10, Slackware 64-current
Posts: 2,124

Rep: Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776
These are files that you would not want unprivileged users from being able to modify (write). Yes, changing the permissions would be appropriate. If they are directories, 755 is generally a good choice and if they are files the similar 644, which removes the executable flag. This still allows "others" read access to these files which may be required for the application to utilize them.
 
Old 02-28-2012, 11:31 AM   #3
masuch
Member
 
Registered: Sep 2011
Location: /dev/null
Distribution: ubuntu 64bits
Posts: 135

Original Poster
Rep: Reputation: 1
Thanks a lot for explanation. I had to change permissions to 644 - they are files.
 
  


Reply

Tags
group, world, writable


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux Kernel 'proc' World Writeable File Security Bypass Vulnerability win32sux Linux - Security 7 11-24-2009 05:02 PM
World Writeable System Files mccartjd Linux - Newbie 6 06-02-2008 06:58 AM
HD not writeable after few minutes Cyber Maid Linux - Hardware 2 02-25-2005 06:33 PM
world writeable files will not stay world writeable antken Mandriva 1 03-02-2004 06:04 PM
What if making /var/mail world-writeable? J_Szucs Linux - Security 4 08-18-2002 10:33 AM


All times are GMT -5. The time now is 01:55 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration