| View previous topic :: View next topic |
| Author |
Message |
curmudgeon
Veteran
Joined: 08 Aug 2003
Posts: 1744
|
 Posted: Tue Aug 14, 2007 2:12 am Post subject: Ownership and permissions of /var/spool/cron/ |
 |
|
On two different machines where I recently installed Gentoo, I noticed:
| Code: | # ls -adl /var/spool/cron/
drwxr-xr-x 4 cron root 4096 2007-08-02 15:06:46 /var/spool/cron// |
This seemed very strange to me, especially when I looked inside of
/usr/portage/sys-process/cronbase/cronbase-0.3.2.ebuild and found:
| Code: | | diropts -m0750 -o root -g cron; keepdir /var/spool/cron |
So I did:
| Code: | /etc/init.d/vixie-cron stop
rm -fr /var/spool/cron/
emerge -1v cronbase vixie-cron |
Now I get (as I would expect):
| Code: | # ls -ald /var/spool/cron/
drwxr-x--- 4 root cron 4096 2007-08-14 01:32:57 /var/spool/cron// |
Does anyone know how that directory got owned by cron in the first place? I have looked through all of the ebuilds that seem possible to do this, and I didn't notice anything (that doesn't mean too much :) ).
Can someone verify that the post-reinstallation ownership and permissions seem preferred from a security standpoint? |
|
| Back to top |
|
 |
John R. Graham
Administrator
Joined: 08 Mar 2005
Posts: 10729
Location: Somewhere over Atlanta, Georgia
|
| Posted: Tue Aug 14, 2007 10:45 am Post subject: |
|
|
Hmm. Both my systems look like what you would expect: | Code: | ceres ~ # ls -ld /var/spool/cron
drwxr-x--- 4 root cron 5 May 1 2006 /var/spool/cron
ceres ~ # |
This system is a 3-year-old install, too. Is yours older than that?
- John |
|
| Back to top |
|
|
curmudgeon
Veteran
Joined: 08 Aug 2003
Posts: 1744
|
| Posted: Wed Aug 15, 2007 11:21 am Post subject: |
|
|
My older systems all look "correct." I noticed the strange ownership and permissions on two brand new installs (within the past two weeks).
I probably won't do another install any time soon, but when I do, I will certainly watch it carefully.
Something in a new install (not the stage file - I looked inside of that), is getting it wrong, and I can't figure out what. |
|
| Back to top |
|
|
|
Networking & Security
