From owner-freebsd-questions Thu Dec 17 12:03:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA09532 for freebsd-questions-outgoing; Thu, 17 Dec 1998 12:03:45 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from corp.au.triax.com (slwag2p03.ozemail.com.au [203.108.157.51]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA09484 for ; Thu, 17 Dec 1998 12:03:24 -0800 (PST) (envelope-from jim@corp.au.triax.com) Received: from localhost (jim@localhost) by corp.au.triax.com (8.9.1a/8.9.1) with ESMTP id HAA00977; Fri, 18 Dec 1998 07:02:21 +1100 (EST) Date: Fri, 18 Dec 1998 07:02:13 +1100 (EST) From: Jim Mock To: Michael Slater cc: freebsd-questions@FreeBSD.ORG Subject: Re: Basic Security Question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 17 Dec 1998, Michael Slater wrote: > Hello, > This might seem like a pretty basic question to most on this list > but here goes.. My boss, a non UNIX person, has directed me to make > the /etc directory readable only by root.. He ignores my argument > that this is not a good thing and claims that FreeBSD must be very > insecure if this is the case. Can someone explain in simple terms > what the permissions should be for the /etc directory, and why it is > not a good idea to make it readable only by root. His assumption is > that a "good" comerical grade system such as Solaris, or BSDI would > never allow this.. > I've seen alot of posts for Solaris and Linux, but none about BSDI, so here's BSDI to add to the list =) drwxr-xr-x 12 root wheel 2048 Dec 3 11:31 etc It's BSDI BSD/OS 3.1 btw. Jim : Jim Mock | [jim@corp.au.triax.com] : : System Administrator | web: http://www.triax.com/ : : Triax Internet Services | ----------------------------- : : Portland, OR USA | FreeBSD: The Power to Serve : : Wagga Wagga, NSW Australia | http://www.freebsd.org/ : To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message