From owner-freebsd-questions Tue Jan 7 10:52:28 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2054637B401 for ; Tue, 7 Jan 2003 10:52:27 -0800 (PST) Received: from sccrmhc03.attbi.com (sccrmhc03.attbi.com [204.127.202.63]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4180F43ED8 for ; Tue, 7 Jan 2003 10:52:26 -0800 (PST) (envelope-from freebsd-questions-local@be-well.no-ip.com) Received: from be-well.ilk.org (lowellg.ne.client2.attbi.com[24.147.188.198]) by sccrmhc03.attbi.com (sccrmhc03) with ESMTP id <2003010718522500300lcclqe>; Tue, 7 Jan 2003 18:52:25 +0000 Received: from be-well.ilk.org (lowellg.ne.client2.attbi.com [24.147.188.198] (may be forged)) by be-well.ilk.org (8.12.6/8.12.6) with ESMTP id h07IqOXt045014; Tue, 7 Jan 2003 13:52:25 -0500 (EST) (envelope-from freebsd-questions-local@be-well.no-ip.com) Received: (from lowell@localhost) by be-well.ilk.org (8.12.6/8.12.6/Submit) id h07IqOim045011; Tue, 7 Jan 2003 13:52:24 -0500 (EST) X-Authentication-Warning: be-well.ilk.org: lowell set sender to freebsd-questions-local@be-well.ilk.org using -f To: Mark Cc: Subject: Re: security vulnerability in dump References: <200301071548.H07FM0J93369@asarian-host.net> <20030107180013.D14422@slave.east.ath.cx> <200301071835.H07IZMJ40741@asarian-host.net> From: Lowell Gilbert Date: 07 Jan 2003 13:52:23 -0500 In-Reply-To: <200301071835.H07IZMJ40741@asarian-host.net> Message-ID: <44n0mc94ig.fsf@be-well.ilk.org> Lines: 10 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Mark writes: > There may be a lot more files one wishes not to be world-readable. :) And > excluding them all from the dump may not be the answer. Especially since it > would be very little trouble to adjust dump's code in such a way that it > writes chmod 600 to begin with. This is silly. Just set umask properly, and you'll be all set. This should not be something for individual programs (like dump) to worry about. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message