Re: security.conf and xdm/xfs

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Thu, Jul 16, 2009 at 09:41:31AM +0200, neys wrote:
> hello,
> 
> i set up a box with netbsd 5.0 amd64. there are no X-components installed, 
> therefore the files /etc/rc.d/xdm and /etc/rc.d/xfs are missing. so 
> security checks from /etc/daily always claim:
> 
> Checking special files and directories.
> missing: ./etc/rc.d/xdm
> missing: ./etc/rc.d/xfs
> 
> 
> because of this part from man security.conf(5):
> 
> The following mtree(8) tags modify how files are determined from 
> /etc/mtree/special and /etc/mtree/special.local:
>     exclude  The entry is ignored; no backups are made
>              and the differences are not displayed.
>              This includes dynamic or binary files such
>              as /var/run/utmp.
> 
>     nodiff   The entry is backed up but the differences
>              are not displayed because the contents of
>              the file are sensitive.  This includes
>              files such as /etc/master.passwd.
> 
> i tried to block the check of those files by adding the following two lines 
> to /etc/mtree/special.local:
> 
> ./etc/rc.d/xdm type=file mode=0555 tags=exclude
> ./etc/rc.d/xfs type=file mode=0555 tags=exclude
> 
> 
> but this does not change anything. is there a way to get rid of the check 
> for those files beside deleting the appropriate lines from 
> /etc/mtree/special?

I added
./etc/rc.d/xdm                  type=file mode=0555     optional
./etc/rc.d/xfs                  type=file mode=0555     optional

to /etc/mtree/special.local

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--