Subject: Re: Default install generates security complaints
To: Jay Maynard <jmaynard@texas.net>
From: Simon Burge <simonb@netbsd.org>
List: port-pmax
Date: 08/31/1999 17:01:32
Jay Maynard wrote:

> I had to reinstall on my 5000/240 after replacing a flaky HD. It generated
> something I noticed, but didn't comment on, the first time around:
> 
> ----- Forwarded message from superuser <root@elmyra.conmicro.cx> -----
> 
> Date: Mon, 30 Aug 1999 03:19:30 -0500 (CDT)
> From: superuser <root@elmyra.conmicro.cx>
> To: root@elmyra.conmicro.cx
> Subject: elmyra daily insecurity output for Mon Aug 30 03:15:02 CDT 1999
> 
> 
> Checking special files and directories.
> usr/include: 
> 	user (3, 0)
> 	gid (7, 0)
> etc/mtree/special: 
> 	permissions (0600, 0444)
> etc/sendmail.cf: 
> 	permissions (0644, 0444)
> 
> ----- End forwarded message -----
> 
> Shouldn't the default install set up the system such that the insecurity
> checker generates no complaints? I did a straight sysinst install with
> nothing weird. Should I send-pr this one, or just complain here? :-)

It's been fixed in both -current and on the 1.4 branch, but not in time
for 1.4.1.  If there's a 1.4.2 it'll be included in that.

Simon.