More secure permissions for /root and /etc/sysctl.conf

Wojciech Puchar wojtek at puchar.net
Mon Feb 3 14:00:07 UTC 2020


>
> I still can not support that as a change:
> a) It has been 755 for 26 years on FreeBSD and also as long as
>   I can remeber (aka v4 research).  Changing it would be a POLA
>   violation.

so if it was wrong for so long, let keep it wrong.

>
> b) No known security flaw has been shown other than user error.

so simply set all files to 777. it's user error forgetting to change it to 
something else.

>
> c) The default for home directories in all the BSD's I looked at
>   are 755.

Not true.


More information about the freebsd-hackers mailing list