Subject: Re: /etc/security: symlink vs. file (for /etc/named.conf)
To: Hubert Feyrer <hubert@feyrer.de>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: tech-security
Date: 01/04/2007 17:26:11
On Thu, Jan 04, 2007 at 05:10:40PM +0100, Hubert Feyrer wrote:
>
> My /etc/named.conf is a symlink instead of a file, and every day my
> 'insecurity' output consists of:
>
> Checking special files and directories.
> etc/named.conf:
> type (file, link)
>
> Things I've tried to get rid of this:
> 1) change 'type=' in /etc/mtree/special from 'file' to 'link'
> 2) set 'check_mtree_follow_symlinks=yes' in /etc/security.conf.
>
> No go in either case - can someone tell me what to do to not see this any
> more? Thanks a lot!
For a similar issue (chrooted named, isn't it ?) I have in
/etc/mtree/special.local:
/set uname=root gname=wheel
./etc type=dir mode=0755
./etc/namedb type=link mode=0755
./etc/named.conf type=link mode=0755
no changes needed to other files in /etc/mtree/
This is on NetBSD 3.x
--
Manuel Bouyer, LIP6, Universite Paris VI. Manuel.Bouyer@lip6.fr
NetBSD: 26 ans d'experience feront toujours la difference
--