Subject: security/9159: A suggestion for a change to the mtree/special file
To: None <gnats-bugs@gnats.netbsd.org>
From: Dave Burgess <burgess@nms.omaha.mitre.org>
List: netbsd-bugs
Date: 01/10/2000 06:51:29
>Number: 9159
>Category: security
>Synopsis: A suggestion for a change to the mtree/special file
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: security-officer (NetBSD Security Officer)
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Mon Jan 10 06:48:01 2000
>Last-Modified:
>Originator: Dave Burgess
>Organization:
Cynjut (Neonramp Inc)
>Release: 1.4.1
>Environment:
System: NetBSD nms.omaha.mitre.org 1.4P NetBSD 1.4P (FIREWALL-V6) #9: Mon Dec 20 09:15:33 CST 1999 burgess@nms.omaha.mitre.org:/usr/src/sys/arch/i386/compile/FIREWALL-V6 i386
>Description:
The current /etc/mtree/special file lists the sendmail.cf file with 644
permissions. The sendmail folks are recommending the permissions be changed
to 444. I concur. The only person who should ever change this file is
root, who can force a write if one is required.
>How-To-Repeat:
>Fix:
On about line 65, change the mode=644 entry to mode=444
>Audit-Trail:
>Unformatted: