Subject: security/4461: MAKEDEV/security inconsistency
To: None <gnats-bugs@gnats.netbsd.org>
From: Henry B. Hotz <hotz@macbsd-840av.jpl.nasa.gov>
List: netbsd-bugs
Date: 11/10/1997 07:37:56
>Number: 4461
>Category: security
>Synopsis: MAKEDEV/security inconsistency
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: gnats-admin (GNATS administrator)
>State: open
>Class: support
>Submitter-Id: net
>Arrival-Date: Mon Nov 10 12:35:05 1997
>Last-Modified:
>Originator: Henry B. Hotz
>Organization:
Jet Propulsion Laboratory
>Release: NetBSD-1.3alpha of Nov 1 or 2.
>Environment:
os
System: NetBSD macbsd-840av 1.3_ALPHA NetBSD 1.3_ALPHA (MACE) #5: Mon Nov 3 15:06:50 CST 1997 khym@dahan.metonymy.com:/usr/src.local/sys/arch/mac68k/compile/MACE mac68k
>Description:
The /dev/MAKEDEV script creates /dev/fd* as bin/bin/0555, but the daily
security audit chron job claims those files should be root/wheel/0755.
>How-To-Repeat:
Do a normal installation and wait a day.
>Fix:
Fix MAKEDEV or the chron job for consistency.
>Audit-Trail:
>Unformatted: