Return to filemodes CVS log

Up to [Research Unix] / researchv10no / cmd / uucp / doc / rtmdiff

Annotation of researchv10no/cmd/uucp/doc/rtmdiff/filemodes, revision 1.1.1.1

1.1       root        1: .Bh
                      2: File permissions
                      3: .PP
                      4: Files in
                      5: .I /usr/lib/uucp
                      6: should be protected
                      7: pretty much as always:
                      8: nothing should have general write permissions,
                      9: .I Systems
                     10: and all the
                     11: .I L.sys
                     12: files
                     13: should not have general read permissions.
                     14: Other data files
                     15: can probably be left readable,
                     16: depending on your level of paranoia:
                     17: for example,
                     18: some of the information in
                     19: .I Permissions
                     20: could be helpful
                     21: to breakin artists.
                     22: .PP
                     23: .I Uucico ,
                     24: .I uusched ,
                     25: .I uuxqt ,
                     26: .I uucp ,
                     27: .I uustat ,
                     28: and
                     29: .I uux
                     30: should be set-user-\s-1ID\s0
                     31: .I uucp
                     32: (or whatever is used locally
                     33: as the administrative login
                     34: for
                     35: .I uucp ).
                     36: They need not be
                     37: set-group-\s-1ID\s0.
                     38: None of the other programs
                     39: should have any set-\s-1ID\s0 bits.
                     40: .PP
                     41: Shell scripts
                     42: invoked by
                     43: .I cron
                     44: should run as user
                     45: .I uucp .
                     46: .PP
                     47: Neither the spool directory
                     48: .I /usr/spool/uucp
                     49: nor any of its subsidiary directories
                     50: need have general write permissions.
                     51: Command files
                     52: (\c
                     53: .B C. )
                     54: are made generally readable
                     55: but not writeable;
                     56: data files and execute files
                     57: (\c
                     58: .B D. ,
                     59: .B X. )
                     60: are kept inaccessible
                     61: except by
                     62: .I uucp .
                     63: Logfiles
                     64: (\c
                     65: .I .Log/\(**/\(** )
                     66: are not generally writeable.
                     67: For no sensible reason,
                     68: however,
                     69: the error logs in
                     70: .I .Admin
                     71: and the system status files in
                     72: .I .Status
                     73: are left in mode 0666.
                     74: .PP
                     75: All this is philosophically
                     76: very similar to the old
                     77: .I uucp ;
                     78: however,
                     79: installing the new system
                     80: is a marvelous opportunity
                     81: to get it wrong.

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.