[sanesecurity] Re: Bad signatures

  • From: Bill Landry <bill@xxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Thu, 12 Mar 2009 12:59:50 -0700

Peter Leem wrote:

>> Oops, make that:
>>
>>     chown root:root /usr/unofficial-dbs/ss-dbs/*
>>     chmod 644 /usr/unofficial-dbs/ss-dbs/*
>>
>> Had the path wrong for chown and forgot to include all files in the
>> directory (*).
>>
>> Bill
>>
>>
>>
>>   
> It's better to use -R option. hh
> 
> chown -R root:root /usr/unofficial-dbs/ss-dbs/

This is fine.

> chmod -R 644 /usr/unofficial-dbs/ss-dbs/

However, this will also change permissions on the directory, as well.

Here is what I will be adding to the script for next release:

   chown -R root:root $work_dir
   find $work_dir -type f -print0 | xargs -0 chmod 0644

This will will place root ownership on all file and directories, and by
using find, set perms of "-rw-r--r--" on files only.

Bill

Other related posts: