From 78b13ca5f0677f9e6e5a07a18473a2d7724b51d0 Mon Sep 17 00:00:00 2001 From: Yoann Vandoorselaere Date: Thu, 25 Nov 1999 19:44:10 +0000 Subject: Initial revision --- init-sh/perm.4 | 72 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 72 insertions(+) create mode 100644 init-sh/perm.4 (limited to 'init-sh/perm.4') diff --git a/init-sh/perm.4 b/init-sh/perm.4 new file mode 100644 index 0000000..8e422df --- /dev/null +++ b/init-sh/perm.4 @@ -0,0 +1,72 @@ +# +# +# - Group for X user +# - Group for audio user +# - Group for dialout user +# - Group for video user +# Welcome in Level 4, aka secure & usable. + +/bin root.root 711 +/boot root.root 700 +/dev root.root 711 +/dev/audio* root.audio 600 +/dev/dsp* root.audio 600 +/etc/ root.adm 711 +/etc/conf.modules root.adm 640 +/etc/cron.daily/ root.adm 750 +/etc/cron.hourly/ root.adm 750 +/etc/cron.monthly/ root.adm 750 +/etc/cron.weekly/ root.adm 750 +/etc/crontab root.adm 640 +/etc/dhcpcd/ root.adm 750 +/etc/dhcpcd/* root.adm 640 +/etc/esd.conf root.audio 640 +/etc/ftpaccess root.adm 640 +/etc/ftpconversions root.adm 640 +/etc/ftpgroups root.adm 640 +/etc/ftphosts root.adm 640 +/etc/ftpusers root.adm 640 +/etc/gettydefs root.adm 640 +/etc/hosts.allow root.adm 640 +/etc/hosts.deny root.adm 640 +/etc/hosts.equiv root.adm 640 +/etc/inetd.conf root.adm 640 +/etc/inittab root.adm 640 +/etc/ld.so.conf root.adm 640 +/etc/lilo.conf root.adm 640 +/etc/modules.conf root.adm 640 +/etc/motd root.adm 644 +/etc/printcap root.adm 640 +/etc/profile root.root 644 +/etc/rc.d/ root.adm 640 +/etc/securetty root.adm 640 +/etc/sendmail.cf root.adm 640 +/etc/ssh_config root.root 644 +/etc/ssh_host_key root.adm 640 +/etc/ssh_host_key.pub root.adm 644 +/etc/sshd_config root.adm 640 +/etc/syslog.conf root.adm 640 +/etc/updatedb.conf root.adm 640 + +/home/ root.adm 751 +/home/* current 700 +/lib root.adm 751 +/mnt root.adm 750 +/root root.root 700 +/sbin root.adm 751 +/tmp root.root 1777 +/usr root.adm 751 +/usr/* root.adm 751 +/usr/X11R6/ root.xgrp 751 +/usr/bin/ root.adm 751 +/usr/bin/* root.root 755 +/usr/sbin/ root.adm 751 +/usr/sbin/* root.root 755 +/var root.root 755 + + + + + + + -- cgit v1.2.1