From: Justin Willoughby (jwilloug@mhc.net)
Date: Mon Feb 03 2003 - 13:10:29 EST
There were several good replies to this question. Although they did not really help I was not overly optimistic in getting to the bottom of this.
As was mentioned the vendor did drop the ball when it came to providing documentation of what files they believed had unusual names.
Thanks again to all who replied!
- Justin
==================
Justin Willoughby
Computer Operations
==================
>>> "Bill Hassell" <pooderbill@mindspring.com> 01/27/03 03:11PM >>>
I would find new security auditors. Seriously, without any criteria, the audit is meaningless since every
filename on the system is acceptable to the filesystem since it was allowed to be created. Most
likely, some sort of auditing tool created the warning message. Find the designer/manufacturer of
the tool and ask:
unusual? Is awk unusual or maybe grep? Most people in the world would say these are very unusual
but I would not recommend removing those unusual filenames.
Or how about MiXeDcAsE as a filename? No problem with Unix systems but silently translated in
PCs in a number of inconsistent ways depending on the software used to display the names. And
you'll find lots of HP-UX software has mixed case filenames.
How about a filename: w
(there's a man page for w, and don't remove it or you may lose the uptime command!
My guess is that an unusual filename is defined as one that has special characters in it. Things like
spaces and punctuation and maybe control characters.
I would rejetc the entire audit out of hand since it is defective by not providing criteria for selection
and naming the actual locations for the files.
As a security specialist, I would find the report quite suspect in quality.
--
Best regards,
Bill Hassell
blhconsulting@mindspring.com
-----Original Message-----
From: hpux-admin-owner@DutchWorks.nl [mailto:hpux-admin-owner@DutchWorks.nl]On Behalf Of Justin Willoughby
Sent: Monday, January 27, 2003 1:31 PM
To: <
Subject: [HPADM] Finding Files with Unusual Names
We had a security audit done a little while back and on their report they listed that one or more files had an unusual name. Of course no examples were given of what files had unusual names....
Any ways to try and find what files they might have been referring to?
Thanks,
- Justin
==================
Justin Willoughby
Computer Operations
==================
--
---> Please post QUESTIONS and SUMMARIES only!! <---
To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
Name: hpux-admin@dutchworks.nl Owner: owner-hpux-admin@dutchworks.nl
Archives: ftp.dutchworks.nl:/pub/digests/hpux-admin (FTP, browse only)
http://www.dutchworks.nl/htbin/hpsysadmin (Web, browse & search)
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:25 EDT