/etc/hosts permissions 1

[AlbertAguirre]

How should the /etc/hosts permissions be set?

775? 665? 440???

 

[grepper]

Should be 775. -rwxrwx-rx

 

[kHz]

660

 

[kHz]

Why would you ever have execute permissions on a file that is only read?

It is 660.

 

[RodKnowlton]

And why would you want to break gethostbyname() and its family for everyone but root and the system group?

664





Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

 

[kHz]

I was going to add, 664 may be better. Thanks, Rod. And use root:system.

 

[kHz]

Although, the Defense Information Systems Agency (DISA) Field Security Operations Unix Security Checklist doesn't specifically list /etc/hosts permission requirements.

 

[RodKnowlton]

DISA also doesn't have list specifications of any kind for /etc/nsswitch.conf or /etc/netsvc.conf.

I guess client side spoofing just isn't a concern to them.



Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

 

[grepper]

Why have execute for /etc/hosts? Don't know ask IBM. It's default with a fresh image.