summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorgshapiro <gshapiro@FreeBSD.org>2002-05-24 01:44:53 +0000
committergshapiro <gshapiro@FreeBSD.org>2002-05-24 01:44:53 +0000
commitd71c35a87e20c1124674a76428a1db37c2c22f0b (patch)
treef0a11158d5554d8b17bd66e50ad1b724089dbc9a
parent480071f11ab322fd70e4db39208b0245ea44b254 (diff)
downloadFreeBSD-src-d71c35a87e20c1124674a76428a1db37c2c22f0b.zip
FreeBSD-src-d71c35a87e20c1124674a76428a1db37c2c22f0b.tar.gz
Change the default permissions for the sendmail statistics file to 0640
instead of 0644 to help protect users against a file locking local denial of service. MFC after: 1 day pending RE approval
-rw-r--r--etc/newsyslog.conf2
-rw-r--r--etc/sendmail/Makefile2
2 files changed, 2 insertions, 2 deletions
diff --git a/etc/newsyslog.conf b/etc/newsyslog.conf
index 78605f7..01893d7 100644
--- a/etc/newsyslog.conf
+++ b/etc/newsyslog.conf
@@ -14,7 +14,7 @@
/var/log/kerberos.log 600 7 100 * Z
/var/log/lpd-errs 644 7 100 * Z
/var/log/maillog 640 7 * @T00 Z
-/var/log/sendmail.st 644 10 * 168 B
+/var/log/sendmail.st 640 10 * 168 B
/var/log/messages 644 5 100 * Z
/var/log/all.log 600 7 * @T00 Z
/var/log/slip.log root:network 640 3 100 * Z
diff --git a/etc/sendmail/Makefile b/etc/sendmail/Makefile
index 5162498..394d7b1 100644
--- a/etc/sendmail/Makefile
+++ b/etc/sendmail/Makefile
@@ -133,7 +133,7 @@ distribution: freebsd.cf freebsd.mc ${INSTALL_CF} ${INSTALL_SUBMIT_CF}
.endif
${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 444 ${SMDIR}/helpfile \
${DESTDIR}/etc/mail/helpfile
- ${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 644 /dev/null \
+ ${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 640 /dev/null \
${DESTDIR}/var/log/sendmail.st
.include <bsd.prog.mk>
OpenPOWER on IntegriCloud