X-Git-Url: https://git.distorted.org.uk/~mdw/checkpath/blobdiff_plain/724621554ef66263f2530e17fd6d8f4074b6475c..4a1f00c41d56ea1656232622bf55f856c218a0e2:/chkpath.1 diff --git a/chkpath.1 b/chkpath.1 index 5742f50..313f0a8 100644 --- a/chkpath.1 +++ b/chkpath.1 @@ -18,17 +18,17 @@ Each directory in turn is broken into its consitituent parts and every step which must be made through the filesystem to reach that directory from the root is scrutinized for vulnerabilities. The checks made against each directory and symbolic link along the way are as follows: -.IP 1. +.IP " 1." No step should be a directory which is world-writable unless its sticky bit is set, and it's not the final step. -.IP 2. +.IP " 2." No step should be a directory which is group-writable unless its sticky bit is set, and it's not the final step. (However, see the .B \-t option below.) -.IP 3. +.IP " 3." No step should be a directory owned by another user (other than root). -.IP 4. +.IP " 4." No step should be a symbolic link inside a sticky directory and owned by another user. .PP