I'm doing a security sweep of a Sun Sol 5.8 system. The file: /dev/console, which links to /devices/pseudo/cn@0:console, has the following perms: crw--w--w- I would like to get rid of the world write permissions. I can change the file permissions, but as soon as log back in, they are changed back to the original settings. Any one have any ideas of what is causing this? Thanks.
My instinct would be to always allow data to be sent to the console device. How sure are you that you want to change that?
That is the security guidance that I have to go by. I only want to take away world-write perms, not the currently logged-in user. The logged-in user becomes the temporary owner of the file by default.
Have they previously demonstrated it is possible and works as intended on Solaris 8?
Yes, it has been demonstrated.