os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fix some simple typos which could cause great havoc. Mainly fix label

Browse source 
settings.  These would not have caused any large issues, just opened a
hole for root to bypass the security.

Noticed by:	Borja Marcos <borjamar@sarenet.es>
This commit is contained in:
Tom Rhodes 2006-05-11 22:05:45 +00:00
parent 512ff59a9b
commit 15d69131fb
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=27810
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
en_US.ISO8859-1/books/handbook/mac/chapter.sgml
View file

@ -1776,7 +1776,7 @@ test: biba/low</screen>
:passwordtime=91d:\ :passwordtime=91d:\
:umask=022:\ :umask=022:\
:ignoretime@:\ :ignoretime@:\
:label=biba/10:</programlisting> :label=biba/10(10-10):</programlisting>
<para>And adding the following line to the default user <para>And adding the following line to the default user
class:</para> class:</para>
@ -1822,8 +1822,8 @@ mac_seeotheruids_load="YES"</programlisting>
<para>Drop the <username>nagios</username> and <para>Drop the <username>nagios</username> and
<username>www</username> users into the insecure class:</para> <username>www</username> users into the insecure class:</para>
<screen>&prompt.root; <userinput>pw usermod nagios -L default</userinput></screen> <screen>&prompt.root; <userinput>pw usermod nagios -L insecure</userinput></screen>
<screen>&prompt.root; <userinput>pw usermod www -L default</userinput></screen> <screen>&prompt.root; <userinput>pw usermod www -L insecure</userinput></screen>
</sect2> </sect2>
<sect2> <sect2>
@ -1937,8 +1937,8 @@ default_labels socket ?biba</programlisting>
make this happen:</para> make this happen:</para>
<screen>&prompt.root; <userinput>cd /etc/mail &amp;&amp; make stop &amp;&amp; \ <screen>&prompt.root; <userinput>cd /etc/mail &amp;&amp; make stop &amp;&amp; \
setpmac biba/equal make start &amp;&amp; setpmac biba/10 apachectl start &amp;&amp; \ setpmac biba/equal make start &amp;&amp; setpmac biba/10\(10-10\) apachectl start &amp;&amp; \
setpmac biba/10 /usr/local/etc/rc.d/nagios.sh forcestart</userinput></screen> setpmac biba/10\(10-10\) /usr/local/etc/rc.d/nagios.sh forcestart</userinput></screen>
<para>Double check to ensure that everything is working <para>Double check to ensure that everything is working
properly. If not, check the log files or error messages. Use properly. If not, check the log files or error messages. Use