Browse Source

Don't allow anyone but root to read /var/log/{daily,weekly,monthly}.out.

Unfortunately this does not fix existing file permissions.
Spotted by Antti Harri <iku at openbsd dot fi>.
OK millert@.
OPENBSD_4_1
ray 18 years ago
parent
commit
8041cb1dcc
1 changed files with 4 additions and 4 deletions
  1. +4
    -4
      src/etc/crontab

+ 4
- 4
src/etc/crontab View File

@ -1,4 +1,4 @@
# $OpenBSD: crontab,v 1.12 2003/03/10 01:05:28 deraadt Exp $
# $OpenBSD: crontab,v 1.13 2006/10/06 23:56:18 ray Exp $
# #
# /var/cron/tabs/root - root's crontab # /var/cron/tabs/root - root's crontab
# #
@ -17,7 +17,7 @@ HOME=/var/log
#1-59 * * * * /usr/bin/newsyslog -m #1-59 * * * * /usr/bin/newsyslog -m
# #
# do daily/weekly/monthly maintenance # do daily/weekly/monthly maintenance
30 1 * * * /bin/sh /etc/daily 2>&1 | tee /var/log/daily.out | mail -s "`/bin/hostname` daily output" root
30 3 * * 6 /bin/sh /etc/weekly 2>&1 | tee /var/log/weekly.out | mail -s "`/bin/hostname` weekly output" root
30 5 1 * * /bin/sh /etc/monthly 2>&1 | tee /var/log/monthly.out | mail -s "`/bin/hostname` monthly output" root
30 1 * * * umask 077; /bin/sh /etc/daily 2>&1 | tee /var/log/daily.out | mail -s "`/bin/hostname` daily output" root
30 3 * * 6 umask 077; /bin/sh /etc/weekly 2>&1 | tee /var/log/weekly.out | mail -s "`/bin/hostname` weekly output" root
30 5 1 * * umask 077; /bin/sh /etc/monthly 2>&1 | tee /var/log/monthly.out | mail -s "`/bin/hostname` monthly output" root
#0 * * * * /usr/libexec/spamd-setup #0 * * * * /usr/libexec/spamd-setup

Loading…
Cancel
Save