[NTLUG:Discuss] Restore owners

[Mike Hart]

Are you running tripwire (or something similar?) My
last RH based endeavor, I seem to recall tripwire was
the intrusion detection system by default. (I think I
had installed CENTOS 4, which is a RH clone...) so I'm
not sure how compatible my answer is to your
question... and it doesn't get you a location. )  This
is out for inspiration for someone with ready access
to a recent RH system/clone.  

(more specifics on the specific flavor or RH/Fedora
may help a solution too.) 


--- Tom McDonald <mickeyd at compuclaim.com> wrote:

> Greg Edwards wrote:
> > How can I restore ownerships on a block of files
> on a RHEL system?  I
> > know that this question has been asked before but
> I couldn't find it in
> > the archives.
> > 
> >  
> > 
> > IIRC, RH keeps a file that is part of the security
> monitoring system and
> > logs the ownerships as of yesterday.  I don't
> remember where this is
> > kept and if RH has a command that will restore the
> ownerships in bulk.
> > If I have the file I can write my own script to
> get it fixed.
> > 
> >  
> > 
> > This was a case of fat fingers and trying to work
> faster that I think!!!
> > I was 1 dir up from where I should have been and
> changed everything in
> > /usr/lib, ugh!!
> > 
> >  
> > 
> > TIA
> > 
> >  
> > 
> > --
> > 
> > Greg Edwards
> > 
> >  
> > 
> > _______________________________________________
> > http://www.ntlug.org/mailman/listinfo/discuss
> > 
> > 
> Greg,
> 
> If your talking about system ownership, most distros
> have a file 
> /etc/permissions that contain the rights assignment,
> and the ownership 
> of the files.  I believe that it includes the
> libraries but you would 
> have to check it.  There is a program that parses
> the file and sets the 
> permissions and ownership, but I don't recall the
> exact name I think it 
> is sec??? or setsec??  (some security program) hope
> it works out.
> 
> 
> Good luck
> 
> Tom
> 
> 
> -- 
> 
> Tom McDonald <mickeyd at compuclaim.com>
> 
> 
> Fifth Law of Applied Terror:
> 	If you are given an open-book exam, you will forget
> your book.
> 
> Corollary:
> 	If you are given a take-home exam, you will forget
> where you live.
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
> 



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs