Subject: security/4461: MAKEDEV/security inconsistency
To: None <gnats-bugs@gnats.netbsd.org>
From: Henry B. Hotz <hotz@macbsd-840av.jpl.nasa.gov>
List: netbsd-bugs
Date: 11/10/1997 07:37:56
>Number:         4461
>Category:       security
>Synopsis:       MAKEDEV/security inconsistency
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    gnats-admin (GNATS administrator)
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 10 12:35:05 1997
>Last-Modified:
>Originator:     Henry B. Hotz
>Organization:
Jet Propulsion Laboratory
>Release:        NetBSD-1.3alpha of Nov 1 or 2.
>Environment:
	os
System: NetBSD macbsd-840av 1.3_ALPHA NetBSD 1.3_ALPHA (MACE) #5: Mon Nov 3 15:06:50 CST 1997 khym@dahan.metonymy.com:/usr/src.local/sys/arch/mac68k/compile/MACE mac68k


>Description:
	The /dev/MAKEDEV script creates /dev/fd* as bin/bin/0555, but the daily
	security audit chron job claims those files should be root/wheel/0755.
>How-To-Repeat:
	Do a normal installation and wait a day.
>Fix:
	Fix MAKEDEV or the chron job for consistency.
>Audit-Trail:
>Unformatted: