On Sat, 17 Oct 2009, jean-francois wrote:

Thanks for the insight. It's not yet clear for me how to prevent the
security script from traversing parts of the file system using
daily.local for I did'nt see anythnig related to this particular point
in both daily(8) and security(8).

Maybe you could advise me where to look for this particular info.

The "ENVIRONMENT" paragraph in security(8):

ENVIRONMENT
     The following variables can be set in /etc/daily.local:

     SUIDSKIP  A whitespace-separated list of absolute paths to be skipped in
               setuid/setgid file checks and in device special file checks.

--
Antti Harri

Reply via email to