File 0003-consistency-between-profiles.patch of Package permissions

Overview Repositories Revisions Requests Users Attributes Meta

File 0003-consistency-between-profiles.patch of Package permissions (Revision 9d6174e7e2571f1c11ce95efeba38a05)

Currently displaying revision 9d6174e7e2571f1c11ce95efeba38a05 , Show latest

commit 9145b8d64637637f21fc20d430c4cbe269128c4f
Author: Johannes Segitz <jsegitz@suse.com>
Date:   Tue Jan 29 16:39:04 2019 +0100

Ensure consistency of entries, otherwise switching between settings
    becomes problematic

Index: permissions-20180125/permissions.easy
===================================================================
--- permissions-20180125.orig/permissions.easy	2019-02-12 17:28:53.482300059 +0100
+++ permissions-20180125/permissions.easy	2019-02-12 17:28:53.490300184 +0100
@@ -33,6 +33,12 @@
 /etc/rmtab                                              root:root          644
 /var/lib/nfs/rmtab                                      root:root          644
 /etc/syslog.conf                                        root:root          644
+/etc/ssh/sshd_config                                    root:root          640
+/etc/cron.d                                             root:root          755
+/etc/cron.daily                                         root:root          755
+/etc/cron.hourly                                        root:root          755
+/etc/cron.monthly                                       root:root          755
+/etc/cron.weekly                                        root:root          755
 
 #
 # suid system programs that need the suid bit to work:
Index: permissions-20180125/permissions.paranoid
===================================================================
--- permissions-20180125.orig/permissions.paranoid	2019-02-12 17:28:53.482300059 +0100
+++ permissions-20180125/permissions.paranoid	2019-02-12 17:28:53.490300184 +0100
@@ -434,6 +434,9 @@
 # incinga2 (bsc#1069410)
 /run/incinga2/cmd					icinga:icingagmd 0750
 
+# fping (bsc#1047921)
+/usr/sbin/fping                                         root:root       0755
+
 # usbauth (bsc#1066877)
 /usr/bin/usbauth-npriv                                  root:usbauth    0750
 /usr/lib/usbauth-notifier                               root:usbauth-notifier  0750
Index: permissions-20180125/permissions.secure
===================================================================
--- permissions-20180125.orig/permissions.secure	2019-02-12 17:28:53.482300059 +0100
+++ permissions-20180125/permissions.secure	2019-02-12 17:28:53.490300184 +0100
@@ -71,6 +71,13 @@
 /var/lib/nfs/rmtab                                      root:root          644
 /etc/syslog.conf                                        root:root          600
 /etc/ssh/sshd_config                                    root:root          600
+# we might want to tighten that up in the future in this profile (remove the
+# ability for others to read/enter)
+/etc/cron.d                                             root:root          755
+/etc/cron.daily                                         root:root          755
+/etc/cron.hourly                                        root:root          755
+/etc/cron.monthly                                       root:root          755
+/etc/cron.weekly                                        root:root          755
 
 #
 # suid system programs that need the suid bit to work:

Places

File 0003-consistency-between-profiles.patch of Package permissions (Revision 9d6174e7e2571f1c11ce95efeba38a05)

Places