https://bugzilla.novell.com/show_bug.cgi?id=827751 https://bugzilla.novell.com/show_bug.cgi?id=827751#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |R.Vickers@cs.rhul.ac.uk --- Comment #1 from Marcus Meissner 2013-07-17 11:11:04 UTC --- /usr/lib/ssh/ssh-keysign does not seem to be tracked in our files. same for nagios is this a local setting only on your side? The rpms need to have code to check the files, otherwise these will appear. (We do not do blanket runs of chkstat --system anymore, but only focused ones for the binaries we know that need it.) does this help? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=827751 https://bugzilla.novell.com/show_bug.cgi?id=827751#c3 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com --- Comment #3 from Marcus Meissner 2013-09-03 15:11:06 UTC --- That stopped as we removed the SuSEconfig global calls. SuSEconfig --module permissions was one of those calls. we could in theory hook a global call in , but when... per boot up? daily? :/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=827751 https://bugzilla.novell.com/show_bug.cgi?id=827751#c5 --- Comment #5 from Ludwig Nussel 2013-09-04 09:15:57 CEST --- Well, there are two opinions, the ones that think using suseconfig style global calls is suprising and the ones that like it. There has been a general decision to get rid of SuSEconfig so we have a different way now. If there are files in packages that may or may not be setuid root depending on local preference feel free to file a bug for those packages to include the files in the perimssions tracking. Additionally the system upgrade docu should simply recommend to run "chkstat --system" after the upgrade. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=827751 https://bugzilla.novell.com/show_bug.cgi?id=827751#c7 --- Comment #7 from Bob Vickers 2014-02-11 11:16:25 UTC --- I can understand the conflict of opinion over suseconfig. Very often on SuSE you have a choice of managing via Yast or of editing configuration files by hand and it is important the two mechanisms do not fight each other. However, on the specific issue of permissions I would say that relying on chmod for any distribution-provided file is always foolish and bound to lead to surprises sooner or later. So you shouldn't try to protect the foolish administrator but instead protect the sensible one who relies on the documented procedure for maintaining permissions. Bob -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.