diff options
Diffstat (limited to 'conf/perm.snf')
| -rw-r--r-- | conf/perm.snf | 31 |
1 files changed, 21 insertions, 10 deletions
diff --git a/conf/perm.snf b/conf/perm.snf index a06bdc4..0a42815 100644 --- a/conf/perm.snf +++ b/conf/perm.snf @@ -1,8 +1,8 @@ # Welcome in Level 4, aka secure & usable. ### / root.adm 751 -/bin/ root.root 711 -/bin/ping root.root 755 +/bin/ root.adm 751 +/bin/ping root.ntools 4750 /bin/rpm rpm.rpm 750 /boot/ root.root 700 /dev/ root.root 711 @@ -33,17 +33,18 @@ /etc/motd root.adm 644 /etc/printcap root.lp 640 /etc/profile.d/* root.root 755 -/etc/rc.d/ root.adm 640 +/etc/rc.d/ root.adm 750 /etc/rc.d/init.d/ root.adm 750 +/etc/rc.d/init.d/* root.adm 740 /etc/rc.d/init.d/mandrake_consmap root.adm 755 -/etc/rc.d/init.d/syslog root.adm 740 /etc/securetty root.root 640 /etc/sendmail.cf root.adm 640 -/etc/shutdown.allow root.root 600 +/etc/shutdown.allow root.adm 640 /etc/ssh/ssh_config root.root 644 /etc/ssh/ssh_host_*key root.adm 600 /etc/ssh/ssh_host_*key.pub root.adm 644 /etc/ssh/sshd_config root.adm 640 +/etc/sysconfig root.adm 751 /etc/syslog.conf root.adm 640 /etc/updatedb.conf root.adm 640 /home/ root.adm 751 @@ -53,25 +54,35 @@ /proc root.kmem 550 /root/ root.root 700 /sbin/ root.adm 751 -/tmp/ root.root 1777 +/tmp/ root.adm 1773 /usr/ root.adm 751 /usr/* root.adm 751 /usr/X11R6/ root.xgrp 751 /usr/bin/ root.adm 751 +/usr/bin/cc root.ctools 750 +/usr/bin/finger root.ntools 750 +/usr/bin/g++* root.ctools 750 +/usr/bin/gcc* root.ctools 750 +/usr/bin/ssh root.ntools 750 +/usr/bin/telnet root.ntools 750 +/usr/bin/w root.ntools 750 +/usr/bin/who root.ntools 750 /usr/lib/rpm/rpm? rpm.rpm 750 /usr/sbin/ root.adm 751 +/usr/sbin/sendmail root.root 755 +/usr/sbin/traceroute root.ntools 4750 /usr/share/doc rpm.rpm 750 /usr/share/man rpm.rpm 750 -/usr/tmp root.root 1777 +/usr/tmp root.adm 1773 /var/ root.root 755 /var/lib/monitoring root.root 751 /var/lib/naat root.admin 2770 -/var/lock/subsys root.root 700 -/var/log/ root.root 711 +/var/lock/subsys root.adm 750 +/var/log/ root.adm 751 /var/log/* root.root 600 /var/log/*/* current 600 /var/log/*/*/* current 600 /var/log/*/. current 700 /var/spool/mail/ root.mail 771 -/var/tmp root.root 1777 +/var/tmp root.adm 1773 /var/www-naat httpd-naat.admin 750 |