freebsd-skq/etc
Conrad Meyer a35bc248fd Restrict default /root permissions
Remove world-readability from the root directory.  Sensitive information may be
stored in /root and we diverge here from normative administrative practice, as
well as installation defaults of other Unix-alikes.  The wheel group is still
permitted to read the directory.

750 is no more restrictive than defaults for the rest of the open source
Unix-alike world.  In particular, Ben Woods surveyed DragonFly, NetBSD,
OpenBSD, ArchLinux, CentOS, Debian, Fedora, Slackware, and Ubuntu.  None have a
world-readable /root by default.

Submitted by:	Gordon Bergling <gbergling AT gmail.com>
Reviewed by:	ian, myself
Discussed with:	emaste (informal approval)
Relnotes:	sure?
Differential Revision:	https://reviews.freebsd.org/D23392
2020-06-04 16:04:19 +00:00
..
gss
mail pkgbase: resolve mailer.conf conflict WITHOUT_SENDMAIL 2020-06-02 02:38:54 +00:00
mtree Restrict default /root permissions 2020-06-04 16:04:19 +00:00
root Finish moving dot.cshrc and dot.profile to bin/csh/ and bin/sh/. 2018-08-29 16:59:19 +00:00
sendmail pkgbase: Add the correct package for sendmail configuration files 2019-06-12 09:17:32 +00:00
group Create and use a tests group for the tests user. 2020-03-27 16:05:37 +00:00
Makefile pkgbase: resolve mailer.conf conflict WITHOUT_SENDMAIL 2020-06-02 02:38:54 +00:00
Makefile.depend META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
master.passwd Create and use a tests group for the tests user. 2020-03-27 16:05:37 +00:00
shells Move back group, master.passwd and shells to etc directory 2019-05-23 18:37:05 +00:00