[svlug] Permissions! :(

Ray Olszewski ray at comarre.com
Sun Nov 1 16:06:15 PST 1998


Scott --

If you made a fairly general permissions error, it could be affecting more
than executables. An ordinary user needs read access to some files in /etc
as well, including the file (which varies depending on configuration) that
supplies the default path (could be /etc/profile, /etc/login.defs -- does
someone know the right one for Debian 2.0?). That would account for your
getting "appname: command not found" messages from bash. 

But for security reasons everything in /etc can't be mode 644, so for a safe
system, start by chmod'ing /etc/* to 644, then make these changes:

        -- mode 755: all subdirectories.
        -- mode 600: 
                /etc/shadow* (assuming you're running with shadow
                        passwords enabled)
                /etc/passwd* except for passwd itself
                /etc/sudoers
                if you're running ssh, /etc/ssh_host_key

BTW, also chmod 755 /usr/local/bin and /usr/local/bin/*, and probably any
other directories listed in a non-root user's default path (certainly any
that include X11 in the path), which you can check by entering "env" at the
command line and looking for the line that begins "PATH=".

All this won't be perfect, but it should get you running again. This is
based on my Slackware system; Debian probably differs in some details that
another will have to provide. But this should get you started, at least.

At 02:44 PM 11/1/98 -0800, George Bonser wrote:
>
>755 is the standard mode for /bin
>
>also check /usr/bin
>
>it looks like the coldsun has no PATH set, how did you create that user?
>you did use the debian adduser command, didn't you?
>
>On Sun, 1 Nov 1998, Scott wrote:
[deleted]
------------------------------------"Never tell me the odds!"---
Ray Olszewski                                        -- Han Solo
762 Garland Drive
Palo Alto, CA  94303-3603
650.321.3561 voice                               ray at comarre.com
650.322.1209 fax                 http://www.comarre.com/ray.html
----------------------------------------------------------------


--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe



More information about the svlug mailing list