summaryrefslogtreecommitdiff
path: root/etc/security
AgeCommit message (Expand)Author
2000-07-02Fix pr9320: improve umask checking for root's dotfiles.sommerfeld
2000-05-26We may as well allow local additions to /etc/security, since it gets donead
2000-05-05check /etc/mail/aliases on check_aliases.itojun
2000-04-24Add skeyaudit to /etc/security (with a variable to disable) per PR 5871fair
2000-01-15Use cat -f to avoid denial of service attacks by people who make .rhostschristos
1999-09-05We already had logic not to try to grab the disklabels of md's andperry
1999-07-22Use standard variable "$0" for the whole line instead of the non-standard,hubertf
1999-04-23Get rid of old-style chown operands.kleink
1999-03-17Add a commented-out duplicate id checker which doesn't exclude toor, andwrstuden
1999-03-17Modify duplicate user id check to exclude "toor". Any other uid 0wrstuden
1999-03-16Fix PR 5068 - scanning ~user/.rhosts files on NFS mounted homefair
1999-02-18Handle + in master.passwd (From PR#4802).abs
1998-09-14Nix "Login %s is off but still has a valid shell" warning for 20-charactertv
1998-08-25* if $check_disklabels=YES, backup and compare of disklabels of current disks.lukem
1998-01-26include rc.subr and use appropriatelylukem
1997-10-08Deal with files in the changelist that are added or removed.mycroft
1997-09-23- use 'ftpd -C user' to check the format of /etc/ftpusers.lukem
1997-09-18- don't print "Checking setuid files and devices:" if no problemslukem
1997-08-22- correct use of generated temporary files.lukem
1997-08-19* ensure that check for '.' in root's $PATH doesn't yield a false positive.lukem
1997-06-24* when checking /etc/master.passwd, read in /etc/shells for a list oflukem
1997-06-24* take advantage of xargs -0 when finding devices and set?id fileslukem
1997-06-23Also check /etc/profile for setting of umask.lukem
1997-06-23Ignore blank lines and comments in /etc/exportslukem
1997-04-21Don't list directories with the setuid bit set or FIFOs.mycroft
1997-04-21Minor cleanup.mycroft
1997-04-21When doing security checks in user home directory, sort by home directory, tomycroft
1997-04-17make /etc/aliases check a bit more discriminating: the line must bemikel
1997-03-10Minor cleanup.mycroft
1997-02-14Don't leave logs in /etc/mtree; from Andrew Wheadon in PR misc/3106.mikel
1997-01-05add configuration file for security, as security.conf.mrg
1996-05-22ignore setgid on dirs.mrg
1996-01-14Several fixes from Arne H. Juul (PR#1814).pk
1995-12-17New-style RCS ids.thorpej
1995-01-31Change .emacsrc to .emacs in list of files to be checked.jtc
1994-10-18Fix the fstype-based pruning algorithms. Partly suggested by John Kohl.mycroft
1994-06-15update to new security scriptcgd
1994-01-15people importing trees from SunOS should be shot; add -d to ls.cgd
1993-12-15Find only set[gu]id files and devices, like old ncheck(1).mycroft
1993-10-27use of xargs wasn't strictly a security hole, but could lead to fouled-cgd
1993-10-27Use xargs(1) to avoid overflowing the argument list to ls(1).mycroft
1993-10-26from FreeBSD: check for set*id devices in a way closer to the original.cgd
1993-10-19Rewrite set[gu]id find command to avoid walking non-local file systems.mycroft
1993-04-02updated to reflect the fact that we don't have an ncheckcgd
1993-03-21initial import of 386bsd-0.1 sourcescgd