Patches&Updates Sudo Security Fix



6 Sep 2005

H-Sphere versions:   All

This patch eliminates writing insecure info in logfiles and fixes their permissions.

Procedure:

  1. Log into your control panel server as root:
    su -
  2. Download the patch package from our site:
    Linux:
    wget http://www.psoft.net/shiv/HS/fix_sudo.tgz

    FreeBSD:
    fetch http://www.psoft.net/shiv/HS/fix_sudo.tgz
  3. Unpack the archive:
    tar xzf fix_sudo.tgz
  4. Run the script:
    sh fix_sudo.sh

The script will set 0600 permissions for the /var/log/messages files on all boxes and will make the necessary changes in /hsphere/local/config/sudo/sudoers.



Copyright 1998-2008. Positive Software Corporation.
All rights reserved.