misc/95684: /root wrong permissions

Jerry McAllister jerrymc at clunix.cl.msu.edu
Thu Apr 13 14:00:33 UTC 2006


The following reply was made to PR misc/95684; it has been noted by GNATS.

From: Jerry McAllister <jerrymc at clunix.cl.msu.edu>
To: c_dornig at gmx.de (C.D.)
Cc: freebsd-gnats-submit at freebsd.org
Subject: Re: misc/95684: /root wrong permissions
Date: Thu, 13 Apr 2006 09:59:31 -0400 (EDT)

 > 
 > 
 > >Number:         95684
 > >Category:       misc
 > >Synopsis:       /root wrong permissions
 > >Confidential:   no
 > >Severity:       critical
 > >Priority:       medium
 > >Responsible:    freebsd-bugs
 > >State:          open
 > >Quarter:        
 > >Keywords:       
 > >Date-Required:
 > >Class:          sw-bug
 > >Submitter-Id:   current-users
 > >Arrival-Date:   Thu Apr 13 09:50:15 GMT 2006
 > >Closed-Date:
 > >Last-Modified:
 > >Originator:     C.D.
 > >Release:        5.4 RELEASE, 6.0 RELEASE
 > >Organization:
 > none
 > >Environment:
 > >Description:
 > Dear FreeBSD Team,
 > 
 > 
 > 
 > with standard installation of FBSD 5.4 Released or 6.0 Released from CD-ROM,
 > you have after install process a wrong permission of /root.
 > It is 0755, but it should be 0700.
 > I see this as an Security hole.
 
 I was just able to look back as far as FreeBSD 3.2 - as far back as 
 I have anything handy running and they all have "/" set to 755.
 
 I don't understand why it should be 0700. 
 
 If you did that, no person could do an ls or get to directories under
 root.   The 755 setting does not allow group or world to write to root,
 just get to the necessary things in it.
 
 ////jerry
 
 > >How-To-Repeat:
 > Install FBSD and make:
 > 
 > ls -l
 > 
 > >Fix:
 > Change install script.
 > >Release-Note:
 > >Audit-Trail:
 > >Unformatted:
 > _______________________________________________
 > freebsd-bugs at freebsd.org mailing list
 > http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
 > To unsubscribe, send any mail to "freebsd-bugs-unsubscribe at freebsd.org"
 > 
 


More information about the freebsd-bugs mailing list