On Tue, Jul 20, 2010 at 05:45:36PM -0600, Ski Dawg wrote:
Hello all,
Today, I ran across a directory in /etc/ on one of our servers whose permissions where set to 600 (drw-------) with root being the owner.
Heheheheh. That machine is so broken. Even 0700 would be unbelievably broken
The directory is for the firewall package for the server, so it is not something malicious. Checking some other systems, they also have this directory and the permissions on those servers is also 600, so it isn't just a messed up permissions on this one machine.
Sounds like some messed up wanna-be security person who doesn't grok Unix.
Basically nothing non-root running will work properly on these machines. And if everything is designed to run as root then the architect has shown other issues. "root" is the user of last recourse on a properly managed server.