svn commit: r349976 - head
Renato Botelho
garga at FreeBSD.org
Thu Jul 25 13:27:22 UTC 2019
On 13/07/19 13:48, Ian Lepore wrote:
> Author: ian
> Date: Sat Jul 13 16:48:27 2019
> New Revision: 349976
> URL: https://svnweb.freebsd.org/changeset/base/349976
>
> Log:
> Add an entry mentioning the permission/mode change to daily accounting files.
>
> Modified:
> head/UPDATING
>
> Modified: head/UPDATING
> ==============================================================================
> --- head/UPDATING Sat Jul 13 16:32:19 2019 (r349975)
> +++ head/UPDATING Sat Jul 13 16:48:27 2019 (r349976)
> @@ -31,6 +31,14 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 13.x IS SLOW:
> disable the most expensive debugging functionality run
> "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
>
> +20190713:
> + Default permissions on the /var/account/acct file (and copies of it rotated
> + by periodic daily scripts) are changed from 0644 to 0640 because the file
> + contains sensitive information that should not be world-readable. If the
> + /var/account directory must be created by rc.d/accounting, the mode used is
> + now 0750. Admins who use the accounting feature are encouraged to change
> + the mode of an existing /var/account directory to 0750 or 0700.
Block is indented with 4 spaces instead of tabs
--
Renato Botelho
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 618 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/svn-src-all/attachments/20190725/a55fffa2/attachment.sig>
More information about the svn-src-all
mailing list