>Number:         6519
>Category:       misc
>Synopsis:       /etc/skeykeys is installed with the wrong mode (insecure)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people (Misc Bug People)
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Dec  1 15:05:00 1998
>Last-Modified:
>Originator:     TheMan
>Organization:
none really...
>Release:        current
>Environment:
System: NetBSD noc 1.2 NetBSD 1.2 (null) #4: Fri Oct 24 01:27:28 EDT 1997 root@noc:/usr/src/sys/arch/i386/compile/null i386
yeah yeah yeah...i'll upgrade.  leave me alone.

>Description:

/etc/skeykeys contains secret password information.  it should be
private.

>How-To-Repeat:

cd src/etc
make distribution (or whatever it is that i did which i forgot already)
read /etc/skeykeys as a normal user

>Fix:

--- Makefile    Tue Dec  1 17:53:19 1998
+++ Makefile.orig       Fri Nov 20 07:14:25 1998
@@ -92,7 +92,7 @@
	ln -s /usr/sbin/rmt ${DESTDIR}/etc/rmt
	${INSTALL} -c -o ${BINOWN} -g operator -m 664 /dev/null \
		${DESTDIR}/etc/dumpdates
-	${INSTALL} -c -o ${BINOWN} -g operator -m 600 /dev/null \
+	${INSTALL} -c -o ${BINOWN} -g operator -m 644 /dev/null \
	${DESTDIR}/etc/skeykeys
	${INSTALL} -c -o root -g wheel -m 600 /dev/null \
		${DESTDIR}/var/cron/log

>Audit-Trail:
>Unformatted: