Browse Source

Prevent warning about insecure hostnames where no /etc/hostname.*

exists. From wcmaier@.
Check target of symbolic links to avoid noise at boot and in
seucrity output where you have several interfaces symlinked to one
config file.
"If you think this is the right thing to do" deraadt@
OPENBSD_4_4
sthen 16 years ago
parent
commit
eca03c4660
2 changed files with 9 additions and 6 deletions
  1. +4
    -4
      src/etc/netstart
  2. +5
    -2
      src/etc/security

+ 4
- 4
src/etc/netstart View File

@ -1,6 +1,6 @@
#!/bin/sh - #!/bin/sh -
# #
# $OpenBSD: netstart,v 1.121 2008/06/09 22:56:42 todd Exp $
# $OpenBSD: netstart,v 1.122 2008/07/23 16:05:47 sthen Exp $
# Strip comments (and leading/trailing whitespace if IFS is set) # Strip comments (and leading/trailing whitespace if IFS is set)
# from a file and spew to stdout # from a file and spew to stdout
@ -40,10 +40,10 @@ ifstart() {
echo "netstart: $file: No such file or directory" echo "netstart: $file: No such file or directory"
return return
fi fi
if [ "$(stat -f "%SLp %u %g" $file)" != "--- 0 0" ]; then
if [ "$(stat -Lf "%SLp %u %g" $file)" != "--- 0 0" ]; then
echo "WARNING: $file is insecure, fixing permissions" echo "WARNING: $file is insecure, fixing permissions"
chmod o-rwx $file
chown root.wheel $file
chmod -LR o-rwx $file
chown -LR root.wheel $file
fi fi
ifconfig $if > /dev/null 2>&1 ifconfig $if > /dev/null 2>&1
if [ "$?" != "0" ]; then if [ "$?" != "0" ]; then


+ 5
- 2
src/etc/security View File

@ -1,6 +1,6 @@
#!/bin/sh - #!/bin/sh -
# #
# $OpenBSD: security,v 1.80 2008/04/17 19:49:16 sthen Exp $
# $OpenBSD: security,v 1.81 2008/07/23 16:05:47 sthen Exp $
# from: @(#)security 8.1 (Berkeley) 6/9/93 # from: @(#)security 8.1 (Berkeley) 6/9/93
# #
@ -303,7 +303,10 @@ fi
# world-readable. # world-readable.
for f in /etc/hostname.* ; do for f in /etc/hostname.* ; do
if [ "$(stat -f "%SLp" $f)" != "---" ]; then
if [ ! -e $f ]; then
continue
fi
if [ "$(stat -Lf "%SLp" $f)" != "---" ]; then
echo "\n$f is world readable." echo "\n$f is world readable."
fi fi
done done


Loading…
Cancel
Save