


TIGER(8)             Administrator Commands              TIGER(8)



NAME
     tiger - UNIX Security Checker

SYNONPSIS
     tiger [-B tigerdir] [-l logdir] [-w workdir] [-b bindir]  [-
     e|-E] [-S] [-c tigerrc]

DESCRIPTION
     Tiger is a package consisting of  Bourne  Shell  scripts,  C
     code  and data files which is used for checking for security
     problems on a UNIX system.  It  scans  system  configuration
     files, file systems, and user configuration files for possi-
     ble  security  problems  and  reports  them.   The   command
     tigexp(8) can be used to obtain explanations of the problems
     reported by tiger.

  OPTIONS
     -B    Specify the directory where tiger  is  installed.   If
          not specified, the current directory is used.

     -d    Specify the name of the  directory  where  tiger  will
          write  the  security  report.   This  defaults  to  the
          current directory.  The filename of the report will  be
          of the form 'security.report.hostname.date.time.'

     -w    Specify a directory to use for creating scratch files.
          This defaults to /tmp.

     -b    Specify the directory which contains (or will contain)
          the binaries generated from the C modules.  If the sys-
          tems directories contain all the binaries, they will be
          used  directly  from there.  If not, then if the bindir
          contains the binaries, these will be used.  If none are
          found  in either place, then an attempt will be made to
          compile the C code and install the executables into the
          bindir.

     -c    Specify an alternate  name  for  the  tigerrc  control
          file.  The default is 'tigerrc'.

     -e    This option will cause  explanations  to  be  inserted
          into  the security report following each message.  This
          can greatly increase the size of the report, as  expla-
          nations may appear repeatedly.

     -E    This option  indicates  that  a  separate  explanation
          report  should  be  created, with explanations for each
          type of message only appearing once.  The  filename  of
          the   explanation   report   will   be   of   the  form
          'explain.report.hostname.date.time.'

     -S    This option indicates that a surface  level  check  of



Security            Last change: 04 Jun 1993                    1






TIGER(8)             Administrator Commands              TIGER(8)



          the  configuration files of any diskless clients served
          by this machine should be checked  at  the  same  time.
          The  checks will not be as in depth as they would be if
          run on the client itself.

SEE ALSO
     tigexp(8), tigerrc(8)

BUGS
     There are a lot more things to check.

     Some places in the package are not shell  meta-character  or
     white-space safe.










































Security            Last change: 04 Jun 1993                    2



