home *** CD-ROM | disk | FTP | other *** search
/ InfoMagic Internet Tools 1993 July / Internet Tools.iso / RockRidge / security / cops / cops_104 / perl / is_able.lst < prev    next >
Encoding:
File List  |  1992-03-10  |  1.6 KB  |  78 lines
  1. #  This lists any/all sensitive files the administration wants to ensure
  2. # non-read/writability of.  Comments are lines starting with a "#".
  3. #
  4. # USE FULL PATHNAMES!
  5. #
  6. #   Lines are of the format:
  7. #
  8. # /path/to/{dir|file}    World/Group    Read/Write/Both
  9. #
  10. # as above        {w|g}        {r|w|b}
  11. #
  12. /            w        w
  13. /etc            w        w
  14. /usr            w        w
  15. /bin            w        w
  16. /dev            w        w
  17. /usr/bin        w        w
  18. /usr/etc        w        w
  19. /usr/adm        w        w
  20. /usr/lib        w        w
  21. /usr/include        w        w
  22. /usr/spool        w        w
  23. /usr/spool/mail        w        w
  24. /usr/spool/news        w        w
  25. /usr/spool/uucp        w        w
  26. /usr/spool/at        w        w
  27. /usr/local        w        w
  28. /usr/local/bin        w        w
  29. /usr/local/lib        w        w
  30. /usr/users        w        w
  31. /Mail            w        w
  32.  
  33. # some Un*x's put shadowpass stuff here:
  34. /etc/security        w        r
  35.  
  36. # /.login /.profile /.cshrc /.rhosts
  37. /.*            w        w
  38.  
  39. #   I think everything in /etc should be !world-writable, as a rule; but
  40. # if you're selecting individual files, do at *least* these:
  41. #   /etc/passwd /etc/group /etc/inittab /etc/rc /etc/rc.local /etc/rc.boot
  42. #   /etc/hosts.equiv /etc/profile /etc/syslog.conf /etc/export /etc/utmp
  43. #   /etc/wtmp
  44. /etc/*            w        w
  45.  
  46. /bin/*            w        w
  47. /usr/bin/*        w        w
  48. /usr/etc/*        w        w
  49. /usr/adm/*        w        w
  50. /usr/lib/*        w        w
  51. /usr/include/*        w        w
  52. /usr/local/lib/*    w        w
  53. /usr/local/bin/*    w        w
  54. /usr/etc/yp*        w        w
  55. /usr/etc/yp/*        w        w
  56.  
  57. # individual files:
  58. /usr/lib/crontab    w        b
  59. /usr/lib/aliases    w        w
  60. /usr/lib/sendmail    w        w
  61. /usr/spool/uucp/L.sys    g        b
  62.  
  63. #  NEVER want these writeable/readable!
  64. /dev/kmem        w        b
  65. /dev/mem        w        b
  66.  
  67. #   Optional List of assorted files that shouldn't be
  68. # write/readable (mix 'n match; add to the list as desired):
  69. /usr/adm/sulog        w        r
  70. /.netrc            w        b
  71. # HP-UX and others:
  72. /etc/btmp        w        b
  73. /etc/securetty        w        b
  74. # Sun-fun
  75. /dev/drum        w        b
  76. /dev/nit        w        b
  77. /etc/sunlink/dni/rc    w        w
  78.