Ubuntu
tiger package

problems and warning

Asked by pliut

I wish to post just some problems Tiger has found in my laptop Ubuntu10.10 :
Login ID avahi-autoipd appears to be a dormant account.
Root user has message capability turned on
Use of cron is not restricted
The port for service sieve is also assigned to services XYZ
/bin/su is setuid to `root'.
There are no umask entries in /etc/init.d/rcS

I am afraid: is it more pressing to cope with ALERT message or WARN?
I have also 5 FAIL
Anyone can read this message?
Thank u in advance
Polo

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu tiger Edit question
Assignee:
No assignee Edit question
Solved by:
pliut
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

Have you been logging on as root?

Revision history for this message
pliut (paolo-liut-deactivatedaccount) said : 		#2

No of course: I think that I could be SUDO
Paolo

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#3

ok boot to root recovery mode and run:

chown root:root /usr/bin/sudo; chmod 4111 /usr/bin/sudo

Will get rid of: /bin/su is setuid to `root'.

Does it fix the rest?

Revision history for this message
pliut (paolo-liut-deactivatedaccount) said : 		#4

The explaination massage says:
"This should be changed by using 'chmod u-s file' where 'file' is the
indicated file."Which is the difference?
Thank u PAolo

Revision history for this message
pliut (paolo-liut-deactivatedaccount) said : 		#5

Right one: chown user /bin/su
Risk from managing /usr/bin/sudo because it must be setuid on root to command as super user!
Paolo