which unix-pc files MUST be writeable by others?

Robert J. Granvin rjg at sialis.mn.org
Sat May 6 10:53:14 AEST 1989


>There are a couple of accounting files
>(utmp, wtmp, a few things in /usr/adm) that need to be writable.  Getting
>right down to the bottom, everything else I made protected except
>	/etc/drvtab
>	/etc/timedsply

You may also want to consider making root (yes, /) to be NOT world
writeable.

As supplied, / comes world writeable (777), and it's very happy to be
a little more secure (755).

-- 
________Robert J. Granvin________   INTERNET: rjg at sialis.mn.org
____National Computer Systems____   CONFUSED: rjg%sialis.mn.org at shamash.cdc.com
__National Information Services__       UUCP: ...uunet!rosevax!sialis!rjg



More information about the Unix-pc.general mailing list