Date: Thu, 6 Sep 2001 20:23:34 +0100 From: void <float@firedrake.org> To: Andrey Simonenko <simon@comsys.ntu-kpi.kiev.ua> Cc: freebsd-hackers@freebsd.org Subject: Re: Permissions on /root directory and /etc/mtree/BSD.root.dist Message-ID: <20010906202334.A6682@firedrake.org> In-Reply-To: <004f01c1369d$5fc07ba0$6d36120a@comsys.ntukpi.kiev.ua> References: <004f01c1369d$5fc07ba0$6d36120a@comsys.ntukpi.kiev.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 06, 2001 at 10:30:08AM +0400, Andrey Simonenko wrote: > > 0700 mode restricts other users from reading /root directory. > When root wants to upgrade system he/she run "make buildworld", > "make installworld". But installworld calls mtree, which changes > /root permissions to default value specified in the /etc/mtree/BSD.root.dist > file. So, if administrator will not forgot about needed permissions > on /root, then installworld will open /root directory for reading > for everybody. > > I propose not to change permissions on /root directory in > the /etc/mtree/BSD.root.dist file and leave them unchanged. > > Comments? There is a whole class of problems like this. For example, my installation of mutt doesn't work right if /var/mail is not mode 1777, but BSD.var.dist changes it to 755 every time I installworld. I think a more general solution might be in order. Perhaps some sort of local.dist that is processed after BSD.*.dist. As a workaround, I put "chmod 1777 /var/mail" in my rc.local script. I suggest you do something similar. -- Ben "An art scene of delight I created this to be ..." -- Sun Ra To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010906202334.A6682>