Re: unix compliance checks - file ownership
Paul Davis <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Organization | Tenable Network Security |
| Message-ID | <[email protected]> |
Doug, Actually, Renaud brings up a great point, the configuration in question is definitely not compliant and goes against good security practices.. I'll defer to Renaud... Renaud Deraison (lists) wrote: > On Jun 2, 2008, at 8:22 PM, Doug Nordwall wrote: > >> so, we have boxes (many) with 2 UID 0 accounts. > > Stop right here. This goes against every Unix administrative best > practices playbook which clearly says that each user should have its > own UID. Why do you have such a setup ? > > > -- Renaud > _______________________________________________ > Nessus mailing list > [email protected] > http://mail.nessus.org/mailman/listinfo/nessus > -- Best Regards, Paul Davis Research Engineer Tenable Network Security Inc Phone: 410.872.0555 www.tenablesecurity.com Is your network TENABLE? _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus