Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Sun
[Top] [All Lists]

Re: Solaris 10 necessary file question

Subject: Re: Solaris 10 necessary file question
Date: Mon, 06 Nov 2006 12:22:46 -0500


Rogier Mulhuijzen wrote:

mail and local (to local) mail. I'm not sure the www account owns any
files on a default install, but if it does, I expect them to be part of
a web administration thingy. If you install or need Apache at any point,

Solaris does not have a "www" account although it does have a "webservd" which does appear to own a file things:

blackhole$ grep webservd /var/sadm/install/contents
/var/apache2/logs d none 0755 webservd webservd SUNWapch2r
/var/apache2/proxy d none 0755 webservd webservd SUNWapch2r

It was created for use by the Apache 2.0 service.

make sure it is configured to run using the nobody user, or keep the www
user.

No! No one should be using the "nobody" account unless it is to support NFS services:

blackhole$ grep nobody /etc/passwd
nobody:x:60001:60001:NFS Anonymous Access User:/:
nobody4:x:65534:65534:SunOS 4.x NFS Anonymous Access User:/:

The web server should use webservd (which it does by default with the
Apache 2.0 in Solaris 10).  For Apache 1.0, there is a bug filed
already: 4806419

If you need an account for your web server, use webservd or create
a new one for it.  That way, access to that service, its processes,
its configs and its data can be more easily controlled.

g

<Prev in Thread] Current Thread [Next in Thread>