How should I set permissions on these files:

[Guest BooYah]

Security Warning: World Writable files found :

- /home/dev/null

- /lib/dev-state/log

- /tmp/.ICE-unix

- /tmp/.ICE-unix/dcop6800-1045475951

- /tmp/.X11-unix

- /tmp/.X11-unix/X0

- /tmp/.font-unix

- /tmp/.font-unix/fs-1

- /tmp/.ki2-unix

- /tmp/OSL_PIPE_501_SingleOfficeIPC_1454029909

- /var/lib/sasl/mux

- /var/lib/wnn/ja_JP/dic/usr/booyah

- /var/lib/wnn/ja_JP/dic/usr/root

- /var/prelude/socket

- /var/spool/postfix/private/bounce

- /var/spool/postfix/private/bsmtp

- /var/spool/postfix/private/cyrus

- /var/spool/postfix/private/defer

- /var/spool/postfix/private/error

- /var/spool/postfix/private/ifmail

- /var/spool/postfix/private/lmtp

- /var/spool/postfix/private/local

- /var/spool/postfix/private/rewrite

- /var/spool/postfix/private/smtp

- /var/spool/postfix/private/uucp

- /var/spool/postfix/private/virtual

- /var/spool/postfix/public/cleanup

- /var/spool/postfix/public/flush

- /var/spool/postfix/public/pickup

- /var/spool/postfix/public/qmgr

- /var/spool/postfix/public/showq

 

Just chmod o -w ? Or should root be the only one with permsion to wirte to these? I'm not sure what all these are for, and I don't want break some program that needs to use these. Thanks.

 

 

 

BooYah

[Cannonfodder]

I may be reaching off a ledge here, but are those all devices and proc (virtual) files? Maybe its related to your /etc/fstab file?

[ramfree17]

tame the beast

 

http://www.mandrakesecure.net/en/docs/msec.php

 

:)

 

ciao!

[Guest BooYah]

Cannonfodder, you're right. But what does it have to do with my /etc/fstab file? Is there a connection with the

 none /proc proc defaults 0 0

line?

 

This is what it looks like:

 

dev/hda1 / ext3 noatime 1 1

none /dev/pts devpts mode=0620 0 0

/dev/hda6 /home ext3 noatime 1 2

none /mnt/cdrom supermount dev=/dev/hdc,fs=auto,ro,--,iocharset=iso8859-1,codepage=850,umask=0 0 0

none /mnt/floppy supermount dev=/dev/fd0,fs=auto,--,iocharset=iso8859-1,sync,codepage=850,umask=0 0 0

none /proc proc defaults 0 0

/dev/hda5 swap swap defaults 0 0

 

Ramfree17,

If I disable the world writable file check, wouldn't that make my box much less secure? Or were your refering to something different?

 

I think I saw a proc tutorial somehwere. I think I'll go try and dig it up.

 

BooYah