Hell: /home/user1/chmod -R +rwx .. . Desktop

[Brant Fitzsimmons]

Wim Bertels wrote:

>Hi,
>
>does anyone now an undo for:
>"chmod -R +rwx .." as root-user in some home dir.
>because now everyting has rwx from the / up (the -R in combination
>with ..)
>it's an ext3 filesystem, so maybe there something possible with the
>journaling?
>
>  
>

You're not going to like the answer, but msec would be the perfect
solution for this.  The problem is that right now it doesn't exist for
Ubuntu.

msec is a utility created by Mandriva Linux.  Depending on the security
level chosen msec will (among other security related tasks) adjust file
permissions and owners for the entire machine on an hourly basis. 
Someone on the Ubuntu hardened list mentioned a desire to port it to
Ubuntu and I think it's a very good idea.

When properly implemented it can add more security that would not
otherwise be there, and when improperly implemented it can cause great
confusion.  If you don't know it's running you will find yourself
adjusting your permissions every hour and wondering why you have to do so.

http://www.brunolinux.com/07-Security/Mandriva_Security_Settings.html

-- 
Brant Fitzsimmons
brant at bfcomputerconsulting.com
-------------------------------------------------------------------
"Strange times are these in which we live when the old and the
young are taught falsehoods in the schools of learning. And the one
man that dares to tell the truth is called at once a lunatic and
a fool."
							-Plato

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20051121/8528a1ff/attachment.sig>