Linode.com Forum Forum Index Linode.com Forum
Linode Community Forums
 


CentOS WORLD-WRITABLE /etc/shadow file

Click here to go to the original topic

 
       Linode.com Forum Forum Index -> Linode.com Announcements
Author Message
caker



Joined: 15 Apr 2003
Posts: 2386
Location: Galloway, NJ
Posted: Mon Oct 04, 2004 8:34 pm    Post subject: CentOS WORLD-WRITABLE /etc/shadow file  
The CentOS images (both the old and the recently updated version) have a world-writable /etc/shadow file. This image was in fact built from scratch and was not online at any point. I can only account this towards a mis-configuration of some kind when I built the image.

If you've deployed CentOS, please perform this as root:

Code: chmod 400 /etc/shadow
This has been corrected in the currently available CentOS image.

I've also sent out emails to everyone who has a CentOS image deployed.

My apologies,
-Chris
Back to top  
caker



Joined: 15 Apr 2003
Posts: 2386
Location: Galloway, NJ
Posted: Mon Oct 04, 2004 10:47 pm    Post subject:  
I'm pretty sure that if you've ever added a user or changed a password that the permissions are corrected automatically.

-Chris
Back to top  
 
       Linode.com Forum Forum Index -> Linode.com Announcements
Page 1 of 1