Subject: Re: Default install generates security complaints
To: Jay Maynard <jmaynard@texas.net>
From: Simon Burge <simonb@netbsd.org>
List: port-pmax
Date: 08/31/1999 17:01:32
Jay Maynard wrote:
> I had to reinstall on my 5000/240 after replacing a flaky HD. It generated
> something I noticed, but didn't comment on, the first time around:
>
> ----- Forwarded message from superuser <root@elmyra.conmicro.cx> -----
>
> Date: Mon, 30 Aug 1999 03:19:30 -0500 (CDT)
> From: superuser <root@elmyra.conmicro.cx>
> To: root@elmyra.conmicro.cx
> Subject: elmyra daily insecurity output for Mon Aug 30 03:15:02 CDT 1999
>
>
> Checking special files and directories.
> usr/include:
> user (3, 0)
> gid (7, 0)
> etc/mtree/special:
> permissions (0600, 0444)
> etc/sendmail.cf:
> permissions (0644, 0444)
>
> ----- End forwarded message -----
>
> Shouldn't the default install set up the system such that the insecurity
> checker generates no complaints? I did a straight sysinst install with
> nothing weird. Should I send-pr this one, or just complain here? :-)
It's been fixed in both -current and on the 1.4 branch, but not in time
for 1.4.1. If there's a 1.4.2 it'll be included in that.
Simon.