negative group permissions?

jb jb.1234abcd at gmail.com
Tue Feb 28 15:10:07 UTC 2012


Anton Shterenlikht <mexas <at> bristol.ac.uk> writes:

> 
> This was discussed in questions@ with no resolution.
> Anybody here can advise further?
> ...

Regarding file .seq or .SEQ

It is an intermediate-processing (run-time) lockfile found in various spool 
dirs and their sub-dirs, like
/var/spool/cron/
          /at,
          /lpd, etc.
It is used to save job# by the respective programs (cron, at, etc).
You can find a ref to .SEQ in file at.c in at port sources.
I did not see ref to .seq in lpr or cron port sources.

The periodic security check 
/etc/periodic/security/110.neggrpperm
checks for risque condition like
! -perm +010 -and -perm +001

The file should not be executable, according to its purpose.

So the lpr.c should be changed from
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) {
to
if ((fd = open(buf, O_RDWR|O_CREAT, 0660)) < 0) {

File a bug report.
jb




More information about the freebsd-current mailing list