Re: access rights in /sbin and /bin [Update]

["Hans-J. Ullrich" <hans.ullrich@loop.de>]

Am Montag, 8. Dezember 2008 schrieb Lennart Sorensen:
> On Sun, Dec 07, 2008 at 04:11:04PM +0100, Hans-J. Ullrich wrote:
> > thanks for the list. I checked and found out, that a lot of binaries in
> > /sbin got permissions to rwxr-xr-- (root:root), but they should have
> > rwxrwxr-x. I wondered, as I never changed the rights manually in the past
> > and I am sure, I have not been hacked. So there is only one explanation:
> > an applicatiopn must have changed it. Does someone know, which
> > application is changing rights of binaries below /sbin ? I suppose, it is
> > either bastille (which I installed and deinstalled a long time ago) or
> > selinux (which i still installed).
> >
> > Please, which manual did i miss to read ???
>
> So far the only thing I have ever seen that causes that is silly people
> who mess with the umask of the root user (which causes dpkg to make lots
> of mistakes).
>
> So if you ever set a umask for your root user, well don't and reinstall
> every affected package to fix the permissions.
>
> --
> Len Sorensen

Hmm, checked, but umask of root is set to 022. Indeed I played with umask, but 
only for the normal user.

Otherwise, I set umask in /etc/login.defs to 077, but IMO this would result in 
700 to files and not in 750 (as I saw). 

Thanks for the hint anyway, I check my system for any related configurations. 

Cheers

Hans