Done in MILANO
Ciao
Luca
Emanuele LEONARDI wrote:
> Due to a problem with the GLOBUS rpms included in the LCG1 releases, a
> few library files in the /opt/globus directory tree are currently
> group/world writable.
>
> In principle this is an exploitable security hole and should be fixed as
> soon as possible.
>
> The fastest way to do this is to log as root on each of the nodes where
> the globus libraries are installed and run the following command:
>
> find /opt/globus -perm -2 -type f -exec chmod go-w {} \;
>
> Node types where this fix should be applied are:
>
> UserInterface
> StorageElement
> ComputingElement
> WorkerNode
> ResourceBroker
> ProxyServer
> Regional MDS
>
> You should check if at your site one or more instances of these node
> types are present and apply to all of them the described procedure. When
> you are done, please post a message to the LCG-RollOut list.
>
> Emanuele
>
> --
> /------------------- Emanuele Leonardi -------------------\
> | eMail: [log in to unmask] - Tel.: +41-22-7674066 |
> | IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
> \---------------------------------------------------------/
--
Luca Vaccarossa
I.N.F.N.- Sezione di Milano
Via Celoria 16
20133 Milano
phone +39 02 50317623
fax +39 02 50317280
|