[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: RC Security Flaw - mkdir & script create as 755, 644. SB &700, yes?



Hi,

On Mon, 2002-02-25 at 22:22, tluxt2@yahoo.com wrote:
> I think that is a bad default.  It provides a way that non root users have
> access to some root information - by default.  Perhaps that information should
> not be available to non root users.
> 
> So, by default, non root users shouldn't be given access to such things.  So,
> by default, those bits should be off.

umask can do this. Any sysadmin running a multiuser system who doesn't
know how to use umask has far worse problems than leaving files open to
read.

755 seems like a fairly reasonable default to me. (is that what's it's
set to? I haven't checked!)

Andrew

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: