Security audit programs

[Jonathan I. Kamens]

In article <40371 at cup.portal.com>, PLS at cup.portal.com (Paul L Schauble) writes:
|> I have a vague recollection of a program posted to comp.sources a while
|> back that would scan a filesystem and catalog setuid and setgid program
|> files.

  I believe what you're referring to is the "COPS" package.

  Versions of it were posted to comp.sources.unix and alt.sources, and are
therefore available at any sites that archive those newsgroups (e.g. 
uunet.uu.net or wuarchive.wustl.edu).  Furthermore, here are a few ftp sites
that have it available:

	Host				File
	-------------------------------	----------------------------
	arthur.cs.purdue.edu		/pub/COPS/cops.tar
	gumby.dsd.trw.com		/pub/security/cops.102.tar.Z
	nuri.inria.fr			/system/cops-1.02.tar.Z
	svin02.info.win.tue.nl		/system/cops1.02.tar.Z
	flop.informatik.tu-muenchen.de	/pub/cops.102.tar.Z

(I found these sites by telnet'ing to quiche.cs.mcgill.ca as archie (no
password) and typing "set search sub", "set sortby time" and then "prog cops".
If you don't telnet access, you can send mail to archie at quiche.cs.mcgill.ca to
make queries, e.g. with mail body "prog cops".  Of course, if you don't know
the name of the package you're looking for, this doesn't help you much. :-)

  If you don't have anonymous ftp access, you can get to the anonymous ftp
servers using the bitftp server at pucc.princeton.edu.  Send mail to
bitftp at pucc.princeton.edu with body "help" for more information.

-- 
Jonathan Kamens			              USnail:
MIT Project Athena				11 Ashford Terrace
jik at Athena.MIT.EDU				Allston, MA  02134
Office: 617-253-8085			      Home: 617-782-0710