From owner-freebsd-security  Wed Sep  3 21:14:41 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id VAA02855
          for security-outgoing; Wed, 3 Sep 1997 21:14:41 -0700 (PDT)
Received: from counterintelligence.ml.org (mdean.vip.best.com [206.86.94.101])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id VAA02850;
          Wed, 3 Sep 1997 21:14:37 -0700 (PDT)
Received: from localhost (jamil@localhost)
	by counterintelligence.ml.org (8.8.7/8.8.5) with SMTP id VAA21461;
	Wed, 3 Sep 1997 21:13:56 -0700 (PDT)
Date: Wed, 3 Sep 1997 21:13:56 -0700 (PDT)
From: "Jamil J. Weatherbee" <jamil@counterintelligence.ml.org>
To: freebsd-stable@freebsd.org
cc: freebsd-security@freebsd.org
Subject: Kernel Install Permissions
Message-ID: <Pine.BSF.3.96.970903211022.21074B-100000@counterintelligence.ml.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


This is just a personal opinion, and maybye it is uneducated, but is there
really some reason for the kernel to be installed chmod 555, wouldn't 544
or even maybye 444 do (I'm not to familiar with the bootloader, I would
guess that it doesn't execute /kernel in the same way a coff binary is
executed so permissions probably don't matter hunh?)