Re: svn commit: r361791 - head/etc/mtree

2020-06-05 Thread Rodney W. Grimes
> On Thu, Jun 04, 2020 at 09:19:35AM -0700, Cy Schubert wrote: > > In message <202006041604.054g4kab098...@repo.freebsd.org>, Conrad Meyer > > writes: > > > New Revision: 361791 > > > URL: https://svnweb.freebsd.org/changeset/base/361791 > > > > > > Log: > > > Restrict default /root permissions >

Re: svn commit: r361791 - head/etc/mtree

2020-06-05 Thread Alexey Dokuchaev
On Thu, Jun 04, 2020 at 09:19:35AM -0700, Cy Schubert wrote: > In message <202006041604.054g4kab098...@repo.freebsd.org>, Conrad Meyer > writes: > > New Revision: 361791 > > URL: https://svnweb.freebsd.org/changeset/base/361791 > > > > Log: > > Restrict default /root permissions > > > > ... >

Re: svn commit: r361791 - head/etc/mtree

2020-06-04 Thread Conrad Meyer
On Thu, Jun 4, 2020 at 9:04 AM Conrad Meyer wrote: > 750 is no more restrictive than defaults for the rest of the open source > Unix-alike world. In particular, Ben Woods surveyed DragonFly, NetBSD, > OpenBSD, ArchLinux, CentOS, Debian, Fedora, Slackware, and Ubuntu. None > have a > wor

Re: svn commit: r361791 - head/etc/mtree

2020-06-04 Thread Cy Schubert
In message <202006041604.054g4kab098...@repo.freebsd.org>, Conrad Meyer writes: > Author: cem > Date: Thu Jun 4 16:04:19 2020 > New Revision: 361791 > URL: https://svnweb.freebsd.org/changeset/base/361791 > > Log: > Restrict default /root permissions > > Remove world-readability from the r

svn commit: r361791 - head/etc/mtree

2020-06-04 Thread Conrad Meyer
Author: cem Date: Thu Jun 4 16:04:19 2020 New Revision: 361791 URL: https://svnweb.freebsd.org/changeset/base/361791 Log: Restrict default /root permissions Remove world-readability from the root directory. Sensitive information may be stored in /root and we diverge here from normative