d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change the default permissions for the sendmail statistics file to 0640

Browse Source 
instead of 0644 to help protect users against a file locking local
denial of service.

MFC after:	1 day
		pending RE approval
This commit is contained in:
gshapiro 2002-05-24 01:44:53 +00:00
parent 480071f11a
commit d71c35a87e
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/newsyslog.conf
View File

@ -14,7 +14,7 @@
/var/log/kerberos.log 600 7 100 * Z
/var/log/lpd-errs 644 7 100 * Z
/var/log/maillog 640 7 * @T00 Z
/var/log/sendmail.st 644 10 * 168 B
/var/log/sendmail.st 640 10 * 168 B
/var/log/messages 644 5 100 * Z
/var/log/all.log 600 7 * @T00 Z
/var/log/slip.log root:network 640 3 100 * Z

2
etc/sendmail/Makefile
View File

@ -133,7 +133,7 @@ distribution: freebsd.cf freebsd.mc ${INSTALL_CF} ${INSTALL_SUBMIT_CF}
.endif
${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 444 ${SMDIR}/helpfile \
${DESTDIR}/etc/mail/helpfile
${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 644 /dev/null \
${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 640 /dev/null \
${DESTDIR}/var/log/sendmail.st
.include <bsd.prog.mk>