File 0002-consistency-between-profiles.patch of Package permissions
commit 9145b8d64637637f21fc20d430c4cbe269128c4f
Author: Johannes Segitz <jsegitz@suse.com>
Date: Tue Jan 29 16:39:04 2019 +0100
Ensure consistency of entries, otherwise switching between settings
becomes problematic
Index: permissions-20181116/permissions.easy
===================================================================
--- permissions-20181116.orig/permissions.easy 2019-02-12 17:25:55.395527446 +0100
+++ permissions-20181116/permissions.easy 2019-02-12 17:25:55.403527571 +0100
@@ -33,6 +33,12 @@
/etc/rmtab root:root 644
/var/lib/nfs/rmtab root:root 644
/etc/syslog.conf root:root 644
+/etc/ssh/sshd_config root:root 640
+/etc/cron.d root:root 755
+/etc/cron.daily root:root 755
+/etc/cron.hourly root:root 755
+/etc/cron.monthly root:root 755
+/etc/cron.weekly root:root 755
#
# suid system programs that need the suid bit to work:
Index: permissions-20181116/permissions.paranoid
===================================================================
--- permissions-20181116.orig/permissions.paranoid 2019-02-12 17:25:55.395527446 +0100
+++ permissions-20181116/permissions.paranoid 2019-02-12 17:25:55.403527571 +0100
@@ -435,6 +435,9 @@
# incinga2 (bsc#1069410)
/run/incinga2/cmd icinga:icingagmd 0750
+# fping (bsc#1047921)
+/usr/sbin/fping root:root 0755
+
# usbauth (bsc#1066877)
/usr/bin/usbauth-npriv root:usbauth 0750
/usr/lib/usbauth-notifier root:usbauth-notifier 0750
Index: permissions-20181116/permissions.secure
===================================================================
--- permissions-20181116.orig/permissions.secure 2019-02-12 17:25:55.395527446 +0100
+++ permissions-20181116/permissions.secure 2019-02-12 17:25:55.403527571 +0100
@@ -71,6 +71,13 @@
/var/lib/nfs/rmtab root:root 644
/etc/syslog.conf root:root 600
/etc/ssh/sshd_config root:root 600
+# we might want to tighten that up in the future in this profile (remove the
+# ability for others to read/enter)
+/etc/cron.d root:root 755
+/etc/cron.daily root:root 755
+/etc/cron.hourly root:root 755
+/etc/cron.monthly root:root 755
+/etc/cron.weekly root:root 755
#
# suid system programs that need the suid bit to work:
