#724328 tiger: perm023a alert when setuid/setguid is set to default permissions

Package:
tiger
Source:
tiger
Description:
security auditing and intrusion detection tools for Linux
Submitter:
Ian Bolton
Date:
2013-09-23 19:18:06 UTC
Severity:
normal
#724328#5
Date:
2013-09-23 19:15:41 UTC
From:
To:
Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * Ran a tiger report and received perm023a alerts for permissions settings which were not different than default debian settings.
/bin/su setuid to 'root' --> same as default debian
/usr/bin/at is setuid to 'daemon' --> same as default debian
/usr/bin/at is setgid to 'daemon' --> same as default debian
/usr/bin/passwd is setuid to 'root' --> same as default debian
/usr/bin/wall is setgid to 'tty' --> same as default debian

Tiger should not alert me about this, as they are upstream standard.