From owner-cvs-all Sat Jul 28 4:55:21 2001 Delivered-To: cvs-all@freebsd.org Received: from Awfulhak.org (gw.Awfulhak.org [217.204.245.18]) by hub.freebsd.org (Postfix) with ESMTP id 486B837B403; Sat, 28 Jul 2001 04:55:15 -0700 (PDT) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (root@hak.lan.Awfulhak.org [172.16.0.12]) by Awfulhak.org (8.11.4/8.11.4) with ESMTP id f6SBtDr33609; Sat, 28 Jul 2001 12:55:13 +0100 (BST) (envelope-from brian@lan.Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.11.4/8.11.4) with ESMTP id f6SBtCc28906; Sat, 28 Jul 2001 12:55:12 +0100 (BST) (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200107281155.f6SBtCc28906@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: Kris Kennaway Cc: Brian Somers , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@Awfulhak.org Subject: Re: cvs commit: src/usr.sbin/ppp Makefile In-Reply-To: Message from Kris Kennaway of "Sat, 28 Jul 2001 04:47:03 PDT." <20010728044659.B66608@xor.obsecurity.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sat, 28 Jul 2001 12:55:12 +0100 From: Brian Somers Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > On Sat, Jul 28, 2001 at 04:34:17AM -0700, Brian Somers wrote: > > brian 2001/07/28 04:34:17 PDT > >=20 > > Modified files: (Branch: RELENG_4) > > usr.sbin/ppp Makefile=20 > > Log: > > MFC: Use 4551/551 permissions rather than 4554/554 > > As I emailed you earlier in the week in relation to pppd, this > substantially changes the file permissions: now every user can run it > with root permissions (before they needed to be in the group). Given > the trade-off between this and the NFS case, I think 4550/4554 is the > better option. Sorry - I assumed the previous email was an observation... With ppp, we're reasonably safe in that an ``allow user'' command must be present in the config to let people use ppp. However, I understand your concern. There may be people out there with configurations that say ``allow user *'' on the basis that they're protected by the ``network'' group permissions. I'll revert the change. > Kris -- Brian http://www.freebsd-services.com/ Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message