>Number:         9159
>Category:       security
>Synopsis:       A suggestion for a change to the mtree/special file
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    security-officer (NetBSD Security Officer)
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Jan 10 06:48:01 2000
>Last-Modified:
>Originator:     Dave Burgess
>Organization:
Cynjut (Neonramp Inc)
	
>Release:        1.4.1
>Environment:
	
System: NetBSD nms.omaha.mitre.org 1.4P NetBSD 1.4P (FIREWALL-V6) #9: Mon Dec 20 09:15:33 CST 1999 burgess@nms.omaha.mitre.org:/usr/src/sys/arch/i386/compile/FIREWALL-V6 i386


>Description:
The current /etc/mtree/special file lists the sendmail.cf file with 644
permissions.  The sendmail folks are recommending the permissions be changed
to 444.  I concur.  The only person who should ever change this file is
root, who can force a write if one is required.
>How-To-Repeat:
	
>Fix:
On about line 65, change the mode=644 entry to mode=444
>Audit-Trail:
>Unformatted: