From owner-freebsd-stable  Thu Feb  8  9:55:42 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from nebula.cybercable.fr (d217.dhcp212-126.cybercable.fr [212.198.126.217])
	by hub.freebsd.org (Postfix) with ESMTP id 9BF7637B698
	for <stable@freebsd.org>; Thu,  8 Feb 2001 09:55:23 -0800 (PST)
Received: (from mux@localhost)
	by nebula.cybercable.fr (8.11.2/8.11.2) id f18HtOP14787
	for stable@freebsd.org; Thu, 8 Feb 2001 18:55:24 +0100 (CET)
	(envelope-from mux)
Date: Thu, 8 Feb 2001 18:55:23 +0100
From: mux <mux@qualys.com>
To: stable@freebsd.org
Subject: Re: /root permissions after installworld
Message-ID: <20010208185523.C650@nebula.cybercable.fr>
References: <20010208191456.A24037@dnepr.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="bCsyhTFzCvuiizWE"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010208191456.A24037@dnepr.net>; from land@dnepr.net on Thu, Feb 08, 2001 at 07:14:57PM +0200
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--bCsyhTFzCvuiizWE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Andrey Lakhno wrote:
> Hi !
>=20
>   Why "make installworld" changes /root permissions to 755 ?
>   It is insecure to have /root directory world readable.

Look at /etc/mtree/BSD.root.dist.

Perhaps we could change the default... Someone ?

Maxime
--=20
Don't be fooled by cheap finnish imitations ; BSD is the One True Code
Key fingerprint =3D F9B6 1D5A 4963 331C 88FC  CA6A AB50 1EF2 8CBE 99D6
Public Key : http://www.epita.fr/~henrio_m/

--bCsyhTFzCvuiizWE
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjqC3YsACgkQq1Ae8oy+mdatcQCfZGD7KkQoAG+1ZwwQYQ4ru6Zq
zBgAmgKK11w4I5OQyxKudhjto0xq9Gfl
=PW0M
-----END PGP SIGNATURE-----

--bCsyhTFzCvuiizWE--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message