From 95d068b14b6d40469b8c124f3bc8c672b8884561 Mon Sep 17 00:00:00 2001 From: Brooks Davis Date: Thu, 24 Feb 2011 23:51:59 +0000 Subject: [PATCH] Enable the check for negative permissions (the group on a file can't do something "everyone" can) by default. X-MFC after: never --- etc/defaults/periodic.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/defaults/periodic.conf b/etc/defaults/periodic.conf index 29e3b00a9d8c..3959e3bd4817 100644 --- a/etc/defaults/periodic.conf +++ b/etc/defaults/periodic.conf @@ -161,7 +161,7 @@ daily_status_security_diff_flags="-b -u" # flags for diff output daily_status_security_chksetuid_enable="YES" # 110.neggrpperm -daily_status_security_neggrpperm_enable="NO" +daily_status_security_neggrpperm_enable="YES" # 200.chkmounts daily_status_security_chkmounts_enable="YES"