mailing list archives
Cyberguard FW Silliness
From: phzy () ANTIPLUR COM
Date: Fri, 3 Nov 2000 18:24:17 -0500
Not an extremely huge issue, however one I think worth noting.
Cyberguard claims that their FW software runs atop 'hardened'
versions of SCO/Unixware (comes bundled w/ the FW package).
However, on a default installation of
the latest version of the Cyberguard FW on SCO, there are a number
of silly permissions on various critical files/directories:
Of course, the obvious symlink/race conditions apply w/ the temp files
When Cyberguard was notified that their 'hardened' OS is not quite
as 'hardened' as originally thought, they stated that we would be
performing the configuration changes at our own risk and will
discontinue our support due to our 'custom', 'uncertified'
FW installation. However, they would glady
send out a consultant at a cost of $15,000 to audit and certify our
'custom' configuration. HEH!
Sent with Antiplur webmail: http://webmail.antiplur.com
- Cyberguard FW Silliness phzy (Nov 05)