Skip site navigation (1)Skip section navigation (2)
Date:      25 Sep 2001 10:13:11 -0700
From:      swear@blarg.net (Gary W. Swearingen)
To:        Christoph Sold <so@i-clue.de>
Cc:        cyu0635@home.com, "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: directory security
Message-ID:  <pr4rprw5w8.rpr@localhost.localdomain>
In-Reply-To: <3BB07955.6000803@i-clue.de>
References:  <3BB067FB.605D6119@home.com> <3BB07955.6000803@i-clue.de>

next in thread | previous in thread | raw e-mail | index | archive | help
Christoph Sold <so@i-clue.de> writes:

> cyu0635@home.com wrote:
> 
> >Is it possible to set the /etc directory
> >not allow the user to read it?  chmod 711
> >
> >I mean is there any system problem?
> 
> Lots of applications try to read /etc/passwd for account verification,
> xlock being only an example.

But with 711 permissions, anyone can read a file in /etc if they know
the name of the file. (Not so with 700.)  Seems odd, but that's the
way it is (on FreeBSD 4.3, at least).

I've never tried it on /etc and can't say if there are other problems.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?pr4rprw5w8.rpr>