[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#35504: PROPOSAL] Permissions of /var/log.



On Wed, 29 Mar 2000, Seth R Arnold wrote:

> * Santiago Vila <sanvila@unex.es> [000329 01:47]:
> > -----------------------------------------------------------------------
> > The /var/log directory should have permissions 2755 (set-group-id)
> > and be owned by root.adm.
> > -----------------------------------------------------------------------
> 
> Santiago, I don't see the benefits of sgid on the directory if the sgid
> group doesn't have write permissions. A user in the adm group would not
> get elevated priveledges this way, nor does it deny any priveledges to
> other users.
> 
> Are there side effects to the directory being sgid to adm that I do not
> know?

Files created by root inside /var/log would be root.adm by default, not
root.root by default.

-- 
 "fec315260f0f42ce8e7d2cf9fbf687c8" (a truly random sig)


Reply to: