diff options
| author | peter <peter@FreeBSD.org> | 2000-07-14 01:12:50 +0000 |
|---|---|---|
| committer | peter <peter@FreeBSD.org> | 2000-07-14 01:12:50 +0000 |
| commit | d7ee90746cf828fdb44fbd975afca7a94a7fa072 (patch) | |
| tree | f83fda7d2daa4eaf9002dd66ff83a0677a7743ca /etc/newsyslog.conf | |
| parent | 758f41c92dac66f40115e5639b1432a55535f653 (diff) | |
| download | FreeBSD-src-d7ee90746cf828fdb44fbd975afca7a94a7fa072.zip FreeBSD-src-d7ee90746cf828fdb44fbd975afca7a94a7fa072.tar.gz | |
Change various log file modes from mode 664 to 644. Allowing group
wheel to trash logfiles is not exactly good security policy. There have
been several gid wheel holes in ports. Various other files were changed
as well (eg: the locate database were set to more restrictive modes (444)
by their generation scripts) so this should be safe for them. utmp and
wtmp are mode 644 already on all the systems we checked.
Submitted by: jkb
Reviewed by: kris
Diffstat (limited to 'etc/newsyslog.conf')
| -rw-r--r-- | etc/newsyslog.conf | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/etc/newsyslog.conf b/etc/newsyslog.conf index 3e0508e..131d626 100644 --- a/etc/newsyslog.conf +++ b/etc/newsyslog.conf @@ -3,12 +3,12 @@ # # logfilename [owner:group] mode count size when [ZB] [/pid_file] [sig_num] /var/log/cron 600 3 100 * Z -/var/log/amd.log 664 7 100 * Z -/var/log/kerberos.log 664 7 100 * Z -/var/log/lpd-errs 664 7 100 * Z -/var/log/maillog 664 7 * @T00 Z -/var/log/sendmail.st 664 10 * 168 B -/var/log/messages 664 5 100 * Z +/var/log/amd.log 644 7 100 * Z +/var/log/kerberos.log 644 7 100 * Z +/var/log/lpd-errs 644 7 100 * Z +/var/log/maillog 644 7 * @T00 Z +/var/log/sendmail.st 644 10 * 168 B +/var/log/messages 644 5 100 * Z /var/log/all.log 600 7 * @T00 Z /var/log/slip.log 600 3 100 * Z /var/log/ppp.log 600 3 100 * Z |
