[Service-advisories] chavez: directions for restoring compromised directories

[Jamie McClelland]

Servers affected: chavez
Date: 2010-06-03

This service advisory is a follow up to the one posted yesterday[0]. It
concerns May First/People Link members whose primary server is chavez
and who changed one or more directories to be world-writable.

Note: if you are not on chavez or you are on chavez but did not change
the permissions on any of your directories from their default settings,
you are not affected. If you are unsure, please continue reading.

Backups of all directories on chavez that were world-writable have been
recovered. However, to avoid overwriting newer data with recovered data,
the directories have not be returned to their original location. It is
the responsibility of each member to transfer their files to the
appropriate place.

To find out if you were were affected, please SFTP[1] or SSH[2] to
chavez.mayfirst.org and click on (or change into) your site directory
(for example, if your site is mayfirst.org, click on or change into the
directory called mayfirst.org).

If you see a directory called restore.2010.06.01 it means you were
affected. Inside that directory you will find a copy of all the
directories that were left world writable. 

If you need help with recovery - please post a ticket at
https://support.mayfirst.org/.

0.
https://lists.mayfirst.org/pipermail/service-advisories/2010-June/000196.html
1. https://support.mayfirst.org/wiki/sftp
2. https://support.mayfirst.org/wiki/secure_shell


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.mayfirst.org/pipermail/service-advisories/attachments/20100603/b541cb70/attachment.pgp>