>Number:         18536
>Category:       misc
>Synopsis:       mtree spec for aliases.db should be optional
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sat Oct 05 01:46:01 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        NetBSD 1.6
>Organization:
	
>Environment:
	
	
System: NetBSD kids.reedmedia.net 1.6 NetBSD 1.6 (GENERIC) #0: Sun Sep 8 19:43:40 UTC 2002 autobuild@tgm.daemon.org:/autobuild/i386/OBJ/autobuild/src/sys/arch/i386/compile/GENERIC i386
Architecture: i386
Machine: i386
>Description:
I don't use a /etc/mail/aliases.db file. I don't see how it can be a
security issue if it is missing. (If you use a mailer that needs
it and can't create itself, then let it complain.)

Checking special files and directories.
missing: ./etc/mail/aliases.db
>How-To-Repeat:
Remove an un-needed (unused) /etc/mail/aliases.db
and wait for next security report.
>Fix:
Please consider this patch:

--- mtree/special.orig	Mon Apr 29 01:23:35 2002
+++ mtree/special	Sat Oct  5 01:39:36 2002
@@ -79,7 +79,7 @@
 ./etc/login.conf		type=file mode=0644 optional
 ./etc/mail			type=dir  mode=0755
 ./etc/mail/aliases		type=file mode=0644
-./etc/mail/aliases.db		type=file mode=0644 tags=exclude
+./etc/mail/aliases.db		type=file mode=0644 optional tags=exclude
 ./etc/mail/helpfile		type=file mode=0444
 ./etc/mail/local-host-names	type=file mode=0644 optional
 ./etc/mail/sendmail.cf		type=file mode=0444
>Release-Note:
>Audit-Trail:
>Unformatted: