>Number:         18476
>Category:       misc
>Synopsis:       add /etc/skel to special mtree
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 30 09:51:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        NetBSD 1.6
>Organization:
http://bsd.reedmedia.net/
>Environment:
	
	
System: NetBSD rainier.reedmedia.net 1.6 NetBSD 1.6 (JCR-20020927) #3: Sat Sep 28 13:40:20 PDT 2002 reed@rainier.reedmedia.net:/usr/src/sys/arch/i386/compile/JCR-20020927 i386
Architecture: i386
Machine: i386
>Description:
For some strange reason my /etc and sub-directories were world-writable
when I unpacked etc.tgz. I don't know why (like some umask issue)
and I can't reproduce. But anyways, when cleaning this up, I saw
my /etc/skel was world-writable but not reported in my security report.
>How-To-Repeat:
chmod 777 /etc/skel # and wait for security report
>Fix:

I am unclear on who or what decides optional, but here is a patch.

--- special.orig	Mon Sep 30 09:38:01 2002
+++ special	Mon Sep 30 09:42:14 2002
@@ -226,6 +226,7 @@
 ./etc/services			type=file mode=0644
 ./etc/shells			type=file mode=0644
 ./etc/shosts.equiv		type=file mode=0600 optional
+./etc/skel			type=dir  mode=0755
 ./etc/spwd.db			type=file mode=0600 tags=exclude
 ./etc/ssh			type=dir  mode=0755 optional
 ./etc/ssh/ssh_config		type=file mode=0644 optional
>Release-Note:
>Audit-Trail:
>Unformatted: