forked from pool/permissions
This commit is contained in:
parent
52272cc429
commit
849137f9ff
69
permissions
69
permissions
@ -21,8 +21,8 @@
|
||||
#
|
||||
# How it works:
|
||||
# Change the entries as you like, then call
|
||||
# `chkstat -set /etc/permissions´ or /etc/permissions.{easy,secure,paranoid}
|
||||
# respectively, or call `SuSEconfig´ as yast do after they think
|
||||
# 'chkstat -set /etc/permissions' or /etc/permissions.{easy,secure,paranoid}
|
||||
# respectively, or call 'SuSEconfig' as yast do after they think
|
||||
# that files have been modified in the system.
|
||||
#
|
||||
# SuSEconfig will use the files /etc/permissions and the ones ending
|
||||
@ -55,46 +55,41 @@
|
||||
#
|
||||
|
||||
/ root:root 755
|
||||
/root root:root 700
|
||||
/tmp root:root 1777
|
||||
/root/ root:root 700
|
||||
/tmp/ root:root 1777
|
||||
/tmp/.X11-unix/ root:root 1777
|
||||
/tmp/.ICE-unix/ root:root 1777
|
||||
/dev root:root 755
|
||||
/bin root:root 755
|
||||
/sbin root:root 755
|
||||
/lib root:root 755
|
||||
/etc root:root 755
|
||||
/home root:root 755
|
||||
/boot root:root 755
|
||||
/opt root:root 755
|
||||
/usr root:root 755
|
||||
/dev/ root:root 755
|
||||
/bin/ root:root 755
|
||||
/sbin/ root:root 755
|
||||
/lib/ root:root 755
|
||||
/etc/ root:root 755
|
||||
/home/ root:root 755
|
||||
/boot/ root:root 755
|
||||
/opt/ root:root 755
|
||||
/usr/ root:root 755
|
||||
|
||||
#
|
||||
# /var:
|
||||
#
|
||||
|
||||
/var/tmp root:root 1777
|
||||
/var/tmp/ root:root 1777
|
||||
/var/tmp/vi.recover/ root:root 1777
|
||||
/var/log root:root 755
|
||||
/var/spool root:root 755
|
||||
/var/spool/atjobs at:at 700
|
||||
/var/spool/atjobs/.SEQ at:at 600
|
||||
/var/spool/atjobs/.lockfile at:at 600
|
||||
/var/spool/atspool at:at 700
|
||||
/var/spool/cron root:root 700
|
||||
/var/spool/mqueue root:root 700
|
||||
/var/spool/news news:news 775
|
||||
/var/spool/uucp uucp:uucp 755
|
||||
/var/spool/voice root:root 755
|
||||
/var/spool/mail root:root 1777
|
||||
/var/adm root:root 755
|
||||
/var/adm/backup root:root 700
|
||||
/var/cache root:root 755
|
||||
/var/cache/fonts root:root 1777
|
||||
/var/cache/man man:root 755
|
||||
/var/yp root:root 755
|
||||
/var/log/ root:root 755
|
||||
/var/spool/ root:root 755
|
||||
/var/spool/mqueue/ root:root 700
|
||||
/var/spool/news/ news:news 775
|
||||
/var/spool/uucp/ uucp:uucp 755
|
||||
/var/spool/voice/ root:root 755
|
||||
/var/spool/mail/ root:root 1777
|
||||
/var/adm/ root:root 755
|
||||
/var/adm/backup/ root:root 700
|
||||
/var/cache/ root:root 755
|
||||
/var/cache/fonts/ root:root 1777
|
||||
/var/cache/man/ man:root 755
|
||||
/var/yp/ root:root 755
|
||||
/var/run/nscd/socket root:root 666
|
||||
/var/run/sudo root:root 700
|
||||
/var/run/sudo/ root:root 700
|
||||
|
||||
#
|
||||
# log files that do not grow remarkably
|
||||
@ -122,7 +117,7 @@
|
||||
/etc/lilo.conf root:root 600
|
||||
/etc/passwd root:root 644
|
||||
/etc/shadow root:shadow 640
|
||||
/etc/init.d root:root 755
|
||||
/etc/init.d/ root:root 755
|
||||
/etc/HOSTNAME root:root 644
|
||||
/etc/hosts root:root 644
|
||||
# Changing the hosts_access(5) files causes trouble with services
|
||||
@ -136,12 +131,12 @@
|
||||
|
||||
/etc/opiekeys root:root 600
|
||||
|
||||
/etc/ppp root:dialout 750
|
||||
/etc/ppp/ root:dialout 750
|
||||
/etc/ppp/chap-secrets root:root 600
|
||||
/etc/ppp/pap-secrets root:root 600
|
||||
|
||||
# sysconfig files:
|
||||
/etc/sysconfig/network/providers root:root 700
|
||||
/etc/sysconfig/network/providers/ root:root 700
|
||||
|
||||
# utempter
|
||||
/usr/sbin/utempter root:tty 2755
|
||||
@ -195,7 +190,7 @@
|
||||
#
|
||||
# directory for system crash dumps (#438041)
|
||||
#
|
||||
/var/crash root:root 1777
|
||||
/var/crash/ root:root 1777
|
||||
|
||||
#
|
||||
# named chroot (#438045)
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 2 11:26:53 CET 2009 - lnussel@suse.de
|
||||
|
||||
- add some missing slashes to directories and remove entries for at
|
||||
and cron (bnc#480855)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Nov 25 14:10:13 CET 2008 - lnussel@suse.de
|
||||
|
||||
|
@ -18,9 +18,9 @@
|
||||
#
|
||||
|
||||
# lock file for emacs
|
||||
/var/lib/xemacs/lock root:root 1777
|
||||
/var/lib/xemacs/lock/ root:root 1777
|
||||
# for screen's session sockets:
|
||||
/var/run/uscreens root:root 1777
|
||||
/var/run/uscreens/ root:root 1777
|
||||
|
||||
#
|
||||
# /etc
|
||||
@ -306,7 +306,7 @@
|
||||
#
|
||||
# faxq helper:
|
||||
/usr/lib/mgetty+sendfax/faxq-helper fax:root 4711
|
||||
/var/spool/fax/outgoing fax:root 1755
|
||||
/var/spool/fax/outgoing/ fax:root 1755
|
||||
/var/spool/fax/outgoing/locks fax:root 0777
|
||||
# TODO: package should set this permissions
|
||||
/var/spool/fax/archive fax:uucp 700
|
||||
@ -328,7 +328,7 @@
|
||||
#
|
||||
# uucp
|
||||
#
|
||||
/var/spool/uucppublic root:root 1777
|
||||
/var/spool/uucppublic/ root:root 1777
|
||||
/usr/bin/uucp uucp:uucp 6555
|
||||
/usr/bin/uuname uucp:uucp 6555
|
||||
/usr/bin/uustat uucp:uucp 6555
|
||||
|
@ -32,9 +32,9 @@
|
||||
# Directories
|
||||
#
|
||||
# no lock files for emacs:
|
||||
/var/lib/xemacs/lock root:trusted 1775
|
||||
/var/lib/xemacs/lock/ root:trusted 1775
|
||||
# for screen's session sockets:
|
||||
/var/run/uscreens root:trusted 1775
|
||||
/var/run/uscreens/ root:trusted 1775
|
||||
|
||||
|
||||
#
|
||||
@ -323,7 +323,7 @@
|
||||
# restrictive, only for "trusted" group users:
|
||||
# faxq helper:
|
||||
/usr/lib/mgetty+sendfax/faxq-helper fax:root 0711
|
||||
/var/spool/fax/outgoing fax:trusted 1770
|
||||
/var/spool/fax/outgoing/ fax:trusted 1770
|
||||
/var/spool/fax/outgoing/locks fax:trusted 1770
|
||||
# TODO: package should set this permissions
|
||||
/var/spool/fax/archive fax:uucp 700
|
||||
@ -345,7 +345,7 @@
|
||||
#
|
||||
# uucp
|
||||
#
|
||||
/var/spool/uucppublic root:uucp 1770
|
||||
/var/spool/uucppublic/ root:uucp 1770
|
||||
/usr/bin/uucp uucp:uucp 0555
|
||||
/usr/bin/uuname uucp:uucp 0555
|
||||
/usr/bin/uustat uucp:uucp 0555
|
||||
|
@ -56,9 +56,9 @@
|
||||
# Directories
|
||||
#
|
||||
# no lock files for emacs:
|
||||
/var/lib/xemacs/lock root:trusted 1775
|
||||
/var/lib/xemacs/lock/ root:trusted 1775
|
||||
# for screen's session sockets:
|
||||
/var/run/uscreens root:root 1777
|
||||
/var/run/uscreens/ root:root 1777
|
||||
|
||||
#
|
||||
# /etc
|
||||
@ -347,7 +347,7 @@
|
||||
# restrictive, only for "trusted" group users:
|
||||
# faxq helper:
|
||||
/usr/lib/mgetty+sendfax/faxq-helper fax:root 4711
|
||||
/var/spool/fax/outgoing fax:root 0755
|
||||
/var/spool/fax/outgoing/ fax:root 0755
|
||||
/var/spool/fax/outgoing/locks fax:root 0755
|
||||
# TODO: package should set this permissions
|
||||
/var/spool/fax/archive fax:uucp 700
|
||||
@ -369,7 +369,7 @@
|
||||
#
|
||||
# uucp
|
||||
#
|
||||
/var/spool/uucppublic root:uucp 1770
|
||||
/var/spool/uucppublic/ root:uucp 1770
|
||||
/usr/bin/uucp uucp:uucp 6555
|
||||
/usr/bin/uuname uucp:uucp 6555
|
||||
/usr/bin/uustat uucp:uucp 6555
|
||||
|
@ -1,7 +1,7 @@
|
||||
#
|
||||
# spec file for package permissions (Version 2008.11.25)
|
||||
# spec file for package permissions (Version 2009.3.2)
|
||||
#
|
||||
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
||||
# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@ -22,7 +22,7 @@ Name: permissions
|
||||
License: GPL v2 or later
|
||||
Group: Productivity/Security
|
||||
AutoReqProv: on
|
||||
Version: 2008.11.25
|
||||
Version: 2009.3.2
|
||||
Release: 1
|
||||
Provides: aaa_base:/etc/permissions
|
||||
Requires: /sbin/SuSEconfig
|
||||
@ -91,6 +91,9 @@ install -m 644 %{SOURCE9} $RPM_BUILD_ROOT/etc
|
||||
/var/adm/fillup-templates/sysconfig.security
|
||||
|
||||
%changelog
|
||||
* Mon Mar 02 2009 lnussel@suse.de
|
||||
- add some missing slashes to directories and remove entries for at
|
||||
and cron (bnc#480855)
|
||||
* Tue Nov 25 2008 lnussel@suse.de
|
||||
- add VirtualBox (bnc#429725)
|
||||
* Fri Nov 07 2008 lnussel@suse.de
|
||||
|
Loading…
Reference in New Issue
Block a user