NAME¶
tigexp - UNIX Security Checker Explanation Generator
SYNOPSIS¶
tigexp msgid [
msgid[
msgid...]]
tigexp [
-f|
-F] [
security_report]
DESCRIPTION¶
Tigexp is used to generate explanations of the output from the
Tiger security checking package. In the first form,
tigexp will
generate an explanation of each of the message ids listed. In the second form,
the security report specified will be scanned and explanations generated. The
-f option will generate one explanation for each unique message id in
the security report, whereas the
-F option will output the security
report with explanations inserted after each entry in the report.
There are five different message levels produced by
Tiger. Each of the
message levels is the last letter of the message id. The levels are:
- ALERT
- A message of this level indicates that Tiger has
detected a possible intrusion attempt or troublesome misconfiguration
which can expose the whole system to attacks.
- FAIL
- Messages of this level indicate a violation of a generic
security policy or a possible intrusion. Appropriate action should be
taken to fix this security issue.
- WARN
- Messages of this level indicate a security issue which
should be checked further and might indicate a probable vulnerability or
exposure. Most Tiger messages appear in this category.
- INFO
- These includes information messages which are not
necessarily a security violation but might be useful for the
administrator. Note that the tigerrc configuration file through the
Tiger_Show_INFO_Msgs option determines whether or not Tiger
shows these items. The default behaviour is to not show them.
- ERROR
- These messages are errors in the execution of Tiger
(or any of its scripts), this is probably due to a misconfiguration in the
program, because of a problem in the installation or because a file needed
for the test is missing. The script who outputs this error should be
investigated further.
- CONFIG
- Messages with this level inform of stages in the
configuration process of Tiger. They are not errors (otherwise
ERROR would be used) but notices for the user running the program
explaining, for example, which configuration might be used.
OPTIONS¶
- -f
- Scan the indicated security report and generate
explanations of it. One explanation will be generated for each unique
message id in the security report. If the name of a security report is not
given, then the report is read from stdin.
- -F
- Output the indicated security report with explanations
inserted after each entry in the report. If the name of a security report
is not given, then the report is read from stdin.
FILES¶
$TIGERHOMEDIR/doc/explain.idx
SEE ALSO¶
tiger(8)
BUGS¶
If the explanation index is out of date, it doesn't recognize it and generates
junk.
