From 8041cb1dcc65c4d356e7f09171f8b9588e31b5ed Mon Sep 17 00:00:00 2001 From: ray <> Date: Fri, 6 Oct 2006 23:56:18 +0000 Subject: [PATCH] Don't allow anyone but root to read /var/log/{daily,weekly,monthly}.out. Unfortunately this does not fix existing file permissions. Spotted by Antti Harri . OK millert@. --- src/etc/crontab | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/etc/crontab b/src/etc/crontab index e4d0e576..5c698697 100644 --- a/src/etc/crontab +++ b/src/etc/crontab @@ -1,4 +1,4 @@ -# $OpenBSD: crontab,v 1.12 2003/03/10 01:05:28 deraadt Exp $ +# $OpenBSD: crontab,v 1.13 2006/10/06 23:56:18 ray Exp $ # # /var/cron/tabs/root - root's crontab # @@ -17,7 +17,7 @@ HOME=/var/log #1-59 * * * * /usr/bin/newsyslog -m # # do daily/weekly/monthly maintenance -30 1 * * * /bin/sh /etc/daily 2>&1 | tee /var/log/daily.out | mail -s "`/bin/hostname` daily output" root -30 3 * * 6 /bin/sh /etc/weekly 2>&1 | tee /var/log/weekly.out | mail -s "`/bin/hostname` weekly output" root -30 5 1 * * /bin/sh /etc/monthly 2>&1 | tee /var/log/monthly.out | mail -s "`/bin/hostname` monthly output" root +30 1 * * * umask 077; /bin/sh /etc/daily 2>&1 | tee /var/log/daily.out | mail -s "`/bin/hostname` daily output" root +30 3 * * 6 umask 077; /bin/sh /etc/weekly 2>&1 | tee /var/log/weekly.out | mail -s "`/bin/hostname` weekly output" root +30 5 1 * * umask 077; /bin/sh /etc/monthly 2>&1 | tee /var/log/monthly.out | mail -s "`/bin/hostname` monthly output" root #0 * * * * /usr/libexec/spamd-setup