Thread: file access problems

so did :

screening system

there package, tiger, screen system potential security holes. while not complete may excellent place start (tiger not check firewall example).

overview of tiger see man tiger , scroll bottom , see listing , brief description of tests performed (modules).

install means, tiger john chkrootkit
code:
sudo apt-get install tiger john chkrootkit
run tiger command line :
code:
sudo tiger -h
-h flag produce nice html document.

command tigexp can used explain results.

quote:
$ /usr/sbin/tigexp pass014w

listed login id disabled in manner ('*' in passwd field, etc),
login shell login id valid shell (from /etc/shells
or system equivalent). valid shell can potentially enable the
login id continue used. login shell should changed to
doesn't exist, or /bin/false.
tiger should give ideas on things research. there can false positives take care not either panic or blindly make system changes without understanding doing , how undo changes (ie make backups of system files before edit them).

got read out terminal :

julio@julio-thinkcentre-m52:~$ sudo apt-get install tiger john chkrootkit
[sudo] password julio:
reading package lists... done
building dependency tree
reading state information... done
following packages installed:
diff john-data
following new packages installed:
chkrootkit diff john john-data tiger
0 upgraded, 5 newly installed, 0 remove , 0 not upgraded.
1 not installed or removed.
need 1,865kb of archives.
after operation, 5,923kb of additional disk space used.
want continue [y/n]? y
get:1 http://us.archive.ubuntu.com/ubuntu/ maverick/universe diff 1:3.0-1 [6,532b]
get:2 http://us.archive.ubuntu.com/ubuntu/ maverick/main chkrootkit i386 0.49-4 [309kb]
get:3 http://us.archive.ubuntu.com/ubuntu/ maverick/main john-data 1.7.3.1-1 [649kb]
get:4 http://us.archive.ubuntu.com/ubuntu/ maverick/main john i386 1.7.3.1-1 [291kb]
get:5 http://us.archive.ubuntu.com/ubuntu/ maverick/universe tiger i386 1:3.2.2-11ubuntu1 [610kb]
fetched 1,865kb in 6s (269kb/s)
preconfiguring packages ...
selecting deselected package diff.
(reading database ... 196195 files , directories installed.)
unpacking diff (from .../diff_1%3a3.0-1_all.deb) ...
selecting deselected package chkrootkit.
unpacking chkrootkit (from .../chkrootkit_0.49-4_i386.deb) ...
selecting deselected package john-data.
unpacking john-data (from .../john-data_1.7.3.1-1_all.deb) ...
selecting deselected package john.
unpacking john (from .../john_1.7.3.1-1_i386.deb) ...
selecting deselected package tiger.
unpacking tiger (from .../tiger_1%3a3.2.2-11ubuntu1_i386.deb) ...
processing triggers man-db ...
setting prelude-lml (1.0.0-1) ...
starting prelude lml: prelude-lmlinvoke-rc.d: initscript prelude-lml, action "start" failed.
dpkg: error processing prelude-lml (--configure):
subprocess installed post-installation script returned error exit status 1
setting diff (1:3.0-1) ...
setting chkrootkit (0.49-4) ...
setting john-data (1.7.3.1-1) ...
setting john (1.7.3.1-1) ...
setting tiger (1:3.2.2-11ubuntu1) ...

creating config file /etc/tiger/tigerrc new version
errors encountered while processing:
prelude-lml
e: sub-process /usr/bin/dpkg returned error code (1)
julio@julio-thinkcentre-m52:~$ sudo tiger -h
tiger un*x security checking system
developed texas a&m university, 1994
updated advanced research corporation, 1999-2002
further updated javier fernandez-sanguino, 2001-2007
covered gnu general public license (gpl)

configuring...

try check using config 'i686' running linux 2.6.35-28-generic...
--config-- [con005c] using configuration files linux 2.6.35-28-generic. using
configuration files generic linux 2.
tiger security scripts *** 3.2.2, 2007.08.28.00.00 ***
output mode html
21:49> beginning security report julio-thinkcentre-m52.
21:49> starting file systems scans in background...
21:49> checking password files...
21:49> checking group files...
21:49> checking user accounts...
21:50> checking .rhosts files...
21:50> checking .netrc files...
21:50> checking ttytab, securetty, , login configuration files...
21:50> checking path settings...
21:50> checking anonymous ftp setup...
21:50> checking mail aliases...
21:50> checking cron entries...
21:50> checking 'services' configuration...
21:51> checking nfs export entries...
21:51> checking permissions , ownership of system files...
--config-- [con010c] filesystem 'devtmpfs' used 'none' not recognised valid filesystem
21:51> checking indications of break-in...
--config-- [con010c] filesystem 'devtmpfs' used 'none' not recognised valid filesystem
21:51> performing rootkit checks...
21:51> performing system specific checks...
/bin/grep: /etc/inittab: no such file or directory
22:15> performing root directory checks...
22:15> checking secure backup devices...
22:15> checking presence of log files...
22:15> checking setting of user's umask...
22:15> checking listening processes...
22:15> checking sshd's configuration...
22:15> checking printers control file...
22:15> checking ftpusers configuration...
22:15> checking ntp configuration...
22:15> waiting filesystems scans complete...
22:15> filesystems scans completed...
22:15> performing check of embedded pathnames...
22:17> security report completed julio-thinkcentre-m52.
security report in `/var/log/tiger/security.report.julio-thinkcentre-m52.110626-21:49.html'.
julio@julio-thinkcentre-m52:~$


after when done , went check file in :
/var/log/tiger/security.report.julio-thinkcentre-m52.110626-21:49.html'.

, got message:

use application can view .html file...i have chosen firefox example , used "gksudo" because need root opening application uses gui in gnome.

code:

gksudo firefox /var/log/tiger/security.report.julio-thinkcentre-m52.110626-21:49.html

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support New to Ubuntu [ubuntu] file access problems

Ubuntu