Date: Thu, 13 Apr 2006 14:00:32 GMT From: Jerry McAllister <jerrymc@clunix.cl.msu.edu> To: freebsd-bugs@FreeBSD.org Subject: Re: misc/95684: /root wrong permissions Message-ID: <200604131400.k3DE0WSe053160@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR misc/95684; it has been noted by GNATS. From: Jerry McAllister <jerrymc@clunix.cl.msu.edu> To: c_dornig@gmx.de (C.D.) Cc: freebsd-gnats-submit@freebsd.org Subject: Re: misc/95684: /root wrong permissions Date: Thu, 13 Apr 2006 09:59:31 -0400 (EDT) > > > >Number: 95684 > >Category: misc > >Synopsis: /root wrong permissions > >Confidential: no > >Severity: critical > >Priority: medium > >Responsible: freebsd-bugs > >State: open > >Quarter: > >Keywords: > >Date-Required: > >Class: sw-bug > >Submitter-Id: current-users > >Arrival-Date: Thu Apr 13 09:50:15 GMT 2006 > >Closed-Date: > >Last-Modified: > >Originator: C.D. > >Release: 5.4 RELEASE, 6.0 RELEASE > >Organization: > none > >Environment: > >Description: > Dear FreeBSD Team, > > > > with standard installation of FBSD 5.4 Released or 6.0 Released from CD-ROM, > you have after install process a wrong permission of /root. > It is 0755, but it should be 0700. > I see this as an Security hole. I was just able to look back as far as FreeBSD 3.2 - as far back as I have anything handy running and they all have "/" set to 755. I don't understand why it should be 0700. If you did that, no person could do an ls or get to directories under root. The 755 setting does not allow group or world to write to root, just get to the necessary things in it. ////jerry > >How-To-Repeat: > Install FBSD and make: > > ls -l > > >Fix: > Change install script. > >Release-Note: > >Audit-Trail: > >Unformatted: > _______________________________________________ > freebsd-bugs@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-bugs > To unsubscribe, send any mail to "freebsd-bugs-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200604131400.k3DE0WSe053160>