From b9db3721f6791a15273274547a872272e885970b Mon Sep 17 00:00:00 2001
From: Eugeni Dodonov <eugeni@mandriva.org>
Date: Fri, 18 Dec 2009 11:04:35 +0000
Subject: Do not report group writable files for gdm user (#56064)

---
 cron-sh/scripts/01_files.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cron-sh/scripts/01_files.sh b/cron-sh/scripts/01_files.sh
index c1135c6..b7f2d76 100755
--- a/cron-sh/scripts/01_files.sh
+++ b/cron-sh/scripts/01_files.sh
@@ -229,6 +229,7 @@ fi
 Filter ${MSEC_TMP} CHECK_USER_FILES
 
 ### Check home directories.  Directories should not be owned by someone else or writable.
+# The 'mail' and 'gdm' user directories are skipped as they are group-writable by design (#56064)
 getent passwd | awk -F: '/^[^+-]/ { print $1 ":" $3 ":" $6 }' | \
 while IFS=: read username uid homedir; do
     if ! expr "$homedir" : "$FILTER"  > /dev/null; then
@@ -241,7 +242,7 @@ while IFS=: read username uid homedir; do
     fi
 done | awk -F: '$3 != $5 && $5 != "(0)" \
         { print "user=" $2 $3 " : home directory is owned by " $4 $5 "." }
-     $1 ~ /^d....w/ && $2 != "lp" && $2 != "mail" \
+     $1 ~ /^d....w/ && $2 != "lp" && $2 != "mail" && $2 != "gdm" \
         { print "user=" $2 $3" : home directory is group writable." }
      $1 ~ /^d.......w/ \
         { print "user=" $2 $3" : home directory is other writable." }' > ${MSEC_TMP}
-- 
cgit v1.2.1