Sudo Security Fix - Positive Software Corporation

H-Sphere versions:   All

This patch eliminates writing insecure info in logfiles and fixes their permissions.

Procedure:

1. Log into your control panel server as root:
   
   su -
2. Download the patch package from our site:
   Linux:
   
   FreeBSD:
   
3. Unpack the archive:
   
   tar xzf fix_sudo.tgz
4. Run the script:
   
   sh fix_sudo.sh

The script will set 0600 permissions for the /var/log/messages files on all boxes and will make the necessary changes in /hsphere/local/config/sudo/sudoers.