From owner-freebsd-current@FreeBSD.ORG Wed Feb 29 10:19:37 2012 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9ED66106564A for ; Wed, 29 Feb 2012 10:19:37 +0000 (UTC) (envelope-from freebsd-current@m.gmane.org) Received: from plane.gmane.org (plane.gmane.org [80.91.229.3]) by mx1.freebsd.org (Postfix) with ESMTP id 54F298FC1B for ; Wed, 29 Feb 2012 10:19:37 +0000 (UTC) Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1S2gdC-0005f0-2l for freebsd-current@freebsd.org; Wed, 29 Feb 2012 11:19:36 +0100 Received: from np-19-75.prenet.pl ([np-19-75.prenet.pl]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Feb 2012 11:19:34 +0100 Received: from jb.1234abcd by np-19-75.prenet.pl with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Feb 2012 11:19:34 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-current@freebsd.org From: jb Date: Wed, 29 Feb 2012 10:19:21 +0000 (UTC) Lines: 31 Message-ID: References: <20120228092244.GB48977@mech-cluster241.men.bris.ac.uk> <20120228162447.GB58311@mech-cluster241.men.bris.ac.uk> <20120229072458.GA95427@DataIX.net> <20120229085716.GA66484@mech-cluster241.men.bris.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: sea.gmane.org User-Agent: Loom/3.14 (http://gmane.org/) X-Loom-IP: 79.139.19.75 (Mozilla/5.0 (X11; FreeBSD i386; rv:9.0.1) Gecko/20100101 Firefox/9.0.1) Subject: Re: negative group permissions? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Feb 2012 10:19:37 -0000 Anton Shterenlikht bristol.ac.uk> writes: > ... > To the best of my knowledge the security warning started > to appear recently. For the previous 2 years or so I haven't > seen it. Now, I didn't modify the default security scripts, > nor the lpd system. The file is created with this permissions > because the OS created it like this, not me. I've no idea > why my file is 0641 instead of 0661. I would suggest (if you can) that you change the .seq permissions to 0664 and watch what happens to it - the purpose is to narrow down who/what changed its mode. Some history. logs. and some ad hoc "watch script" would do it. > > So, given that the lpr.c hasn't changed for years, > perhaps the periodic scripts have, and what was > earlier considered fine now is considered serious enough > to issue a security warning. > > In any case, it seems either lpr.c needs to be changed, > or if 0661 is necessary, then the periodic sripts need to > be changed to ignore this file. > The periodic script is OK. Here is the author's view: http://lists.freebsd.org/pipermail/freebsd-hackers/2010-October/033256.html jb