Re: / owned by bin causes sshd to complain bad ownership

2012-06-23 Thread Julian H. Stacey
> If you look hard enough you will can find the v5root.tar.gz from 1974 on > unixarchive.cn-k dot de or some other mirrors ;) http://unixarchive.cn-k.de/PDP-11/Distributions/research/Dennis_v5/ This looks an interesting site, Thanks Olli :-) Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sy

Re: / owned by bin causes sshd to complain bad ownership

2012-06-23 Thread Julian H. Stacey
Hi, Reference: > From: Fahad > Date: Fri, 22 Jun 2012 10:24:55 -0700 > Message-id: <4fe4aa67.4060...@budacom.net> Fahad wrote: > As Mark put it, if everything is owned by bin you would need to be root > to do anything. False. most bins have o+rx eg -r-xr-xr-x 1 root whee

Re: / owned by bin causes sshd to complain bad ownership

2012-06-23 Thread Dag-Erling Smørgrav
Garance A Drosehn writes: > At one time I read that having directories/files owned by root was a > security benefit when considering the -maproot= for NFS exports. > All unix systems recognize UID=0 means root, and there is no other > UID which all unix systems agree on. Disclaimer: I rarely use

Re: / owned by bin causes sshd to complain bad ownership

2012-06-23 Thread Dag-Erling Smørgrav
Fahad writes: > As Mark put it, if everything is owned by bin you would need to be > root to do anything. No. DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-secu

Re: / owned by bin causes sshd to complain bad ownership

2012-06-23 Thread Dag-Erling Smørgrav
"Julian H. Stacey" writes: > I don't question the "user or" that's fine It's the final "root" I > find strange. I guess whoever wrote sshd was so used to "root" > they never considered "bin" could be better. Maybe they did, and decided it wasn't. I'm firmly of the opinion that it isn't. You al

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Jason Hellenthal
On Fri, Jun 22, 2012 at 06:11:40PM -0500, Scott Lambert wrote: > On Fri, Jun 22, 2012 at 07:15:25PM +0200, Julian H. Stacey wrote: > > Jason Hellenthal wrote: > > > > > > On Fri, Jun 22, 2012 at 03:43:47PM +0200, Julian H. Stacey wrote: > > > > Over use of Root seems Bad. > > > > Our ownership

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Scott Lambert
On Fri, Jun 22, 2012 at 07:15:25PM +0200, Julian H. Stacey wrote: > Jason Hellenthal wrote: > > > > On Fri, Jun 22, 2012 at 03:43:47PM +0200, Julian H. Stacey wrote: > > > Over use of Root seems Bad. > > > Our ownership scheme has degraded compared to early 1980s Unix, where > > > most bin & li

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Claude Buisson
On 06/22/2012 20:34, olli hauer wrote: On 2012-06-22 15:43, Julian H. Stacey wrote: Hi freebsd-security@freebsd.org On an 8.3-RELEASE running sshd, /var/log/auth.log Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: bad ownership or modes for directory / Until I d

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread olli hauer
On 2012-06-22 15:43, Julian H. Stacey wrote: > Hi freebsd-security@freebsd.org > On an 8.3-RELEASE running sshd, /var/log/auth.log > Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: > bad ownership or modes for directory / > Until I did > chown 0:0 / > ( It was p

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Garance A Drosehn
On 6/22/12 1:15 PM, Julian H. Stacey wrote: Jason Hellenthal wrote: It is not really clear why you would want to change the permissions of root:wheel of / on any of these. To Increase security. More visual prompting of when juniot admins blunder& cerate junk as root

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Julian H. Stacey
Hi, =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= wrote: > "Julian H. Stacey" writes: > > On an 8.3-RELEASE running sshd, /var/log/auth.log > > Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: > > bad ownership or modes for directory / > > sshd requires that the user's authorized

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Fahad
As Mark put it, if everything is owned by bin you would need to be root to do anything. Where is the benefit in this ?, you mentioned stupid junior admins , well in that case have a better hiring process , no need to obfuscate the current setup. On 06/22/2012 09:36 AM, Mark Felder wrote: On

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Dag-Erling Smørgrav
"Julian H. Stacey" writes: > On an 8.3-RELEASE running sshd, /var/log/auth.log > Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: > bad ownership or modes for directory / sshd requires that the user's authorized_keys, the directory it's in (~/.ssh) and all its ancest

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Julian H. Stacey
Jason Hellenthal wrote: > > On Fri, Jun 22, 2012 at 03:43:47PM +0200, Julian H. Stacey wrote: > > Hi freebsd-security@freebsd.org > > On an 8.3-RELEASE running sshd, /var/log/auth.log > > Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: > > bad ownership or modes for dire

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Mark Felder
On Fri, 22 Jun 2012 10:59:28 -0500, Jason Hellenthal wrote: Security principles are well laid out and have not changed in a long time. Vering away from those principles will cause a LOT of administrative overhead as most software out there can expect a sane environment if / is root:wheel W

Re: / owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Jason Hellenthal
On Fri, Jun 22, 2012 at 03:43:47PM +0200, Julian H. Stacey wrote: > Hi freebsd-security@freebsd.org > On an 8.3-RELEASE running sshd, /var/log/auth.log > Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: > bad ownership or modes for directory / > Until I did > c

/ owned by bin causes sshd to complain bad ownership

2012-06-22 Thread Julian H. Stacey
Hi freebsd-security@freebsd.org On an 8.3-RELEASE running sshd, /var/log/auth.log Jun 22 12:54:06 lapr sshd[57505]: Authentication refused: bad ownership or modes for directory / Until I did chown 0:0 / ( It was previously drwxr-xr-x 25 bin bin 1024