|
|
# $OpenBSD: special,v 1.126 2020/06/22 09:28:04 mvs Exp $
|
|
|
#
|
|
|
# Hand-crafted mtree specification for the dangerous files.
|
|
|
#
|
|
|
|
|
|
. type=dir mode=0755 uname=root gname=wheel
|
|
|
|
|
|
dev type=dir mode=0755 uname=root gname=wheel
|
|
|
fd type=dir mode=0555 uname=root gname=wheel ignore
|
|
|
.. #dev/fd
|
|
|
kmem type=char mode=0640 uname=root gname=kmem
|
|
|
mem type=char mode=0640 uname=root gname=kmem
|
|
|
.. #dev
|
|
|
|
|
|
etc type=dir mode=0755 uname=root gname=wheel
|
|
|
acme-client.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
bgpd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
chio.conf type=file mode=0644 uname=root gname=operator optional
|
|
|
crontab type=file mode=0600 uname=root gname=wheel optional
|
|
|
csh.cshrc type=file mode=0644 uname=root gname=wheel optional
|
|
|
csh.login type=file mode=0644 uname=root gname=wheel optional
|
|
|
csh.logout type=file mode=0644 uname=root gname=wheel optional
|
|
|
daily type=file mode=0644 uname=root gname=wheel
|
|
|
daily.local type=file mode=0644 uname=root gname=wheel optional
|
|
|
dhcpd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
dvmrpd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
exports type=file mode=0644 uname=root gname=wheel optional
|
|
|
fbtab type=file mode=0644 uname=root gname=wheel
|
|
|
fstab type=file mode=0644 uname=root gname=wheel
|
|
|
ftpchroot type=file mode=0644 uname=root gname=wheel optional
|
|
|
ftpusers type=file mode=0644 uname=root gname=wheel
|
|
|
group type=file mode=0644 uname=root gname=wheel
|
|
|
hostapd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
hosts type=file mode=0644 uname=root gname=wheel
|
|
|
httpd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
ifstated.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
iked type=dir mode=0755 uname=root gname=wheel
|
|
|
.. #iked
|
|
|
iked.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
inetd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
ipsec.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
isakmpd type=dir mode=0755 uname=root gname=wheel
|
|
|
isakmpd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
isakmpd.policy type=file mode=0600 uname=root gname=wheel optional
|
|
|
.. #isakmpd
|
|
|
ldapd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
ldpd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
login.conf type=file mode=0644 uname=root gname=wheel
|
|
|
mail.rc type=file mode=0644 uname=root gname=wheel
|
|
|
mailer.conf type=file mode=0644 uname=root gname=wheel
|
|
|
master.passwd type=file mode=0600 uname=root gname=wheel
|
|
|
monthly type=file mode=0644 uname=root gname=wheel
|
|
|
monthly.local type=file mode=0644 uname=root gname=wheel optional
|
|
|
mrouted.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
mail type=dir mode=0755 uname=root gname=wheel
|
|
|
aliases type=file mode=0644 uname=root gname=wheel optional
|
|
|
aliases.db type=file mode=0644 uname=root gname=wheel optional
|
|
|
secrets type=file mode=0640 uname=root gname=_smtpd optional
|
|
|
secrets.db type=file mode=0640 uname=root gname=_smtpd optional
|
|
|
smtpd.conf type=file mode=0644 uname=root gname=wheel
|
|
|
spamd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
.. #mail
|
|
|
mtree type=dir mode=0755 uname=root gname=wheel
|
|
|
special type=file mode=0600 uname=root gname=wheel
|
|
|
.. #mtree
|
|
|
moduli type=file mode=0644 uname=root gname=wheel
|
|
|
netstart type=file mode=0644 uname=root gname=wheel
|
|
|
npppd type=dir mode=0755 uname=root gname=wheel
|
|
|
npppd.conf type=file mode=0600 uname=root gname=wheel
|
|
|
npppd-users type=file mode=0600 uname=root gname=wheel
|
|
|
.. #npppd
|
|
|
ntpd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
ospfd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
ospf6d.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
passwd type=file mode=0644 uname=root gname=wheel
|
|
|
pf.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
printcap mode=0644 uname=root gname=wheel optional
|
|
|
radiusd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
rc type=file mode=0644 uname=root gname=wheel
|
|
|
rc.conf type=file mode=0644 uname=root gname=wheel
|
|
|
rc.conf.local type=file mode=0644 uname=root gname=wheel optional
|
|
|
rc.local type=file mode=0644 uname=root gname=wheel optional
|
|
|
rc.securelevel type=file mode=0644 uname=root gname=wheel optional
|
|
|
rc.shutdown type=file mode=0644 uname=root gname=wheel optional
|
|
|
relayd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
remote type=file mode=0644 uname=root gname=wheel optional
|
|
|
resolv.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
resolv.conf.tail type=file mode=0644 uname=root gname=wheel optional
|
|
|
rbootd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
ripd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
sasyncd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
sensorsd.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
shells type=file mode=0644 uname=root gname=wheel
|
|
|
skey type=dir mode=01730 uname=root gname=auth optional
|
|
|
.. #skey
|
|
|
snmpd.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
soii.key type=file mode=0600 uname=root gname=wheel optional
|
|
|
spwd.db type=file mode=0640 uname=root gname=_shadow
|
|
|
ssh type=dir mode=0755 uname=root gname=wheel optional
|
|
|
ssh_config type=file mode=0644 uname=root gname=wheel
|
|
|
ssh_host_dsa_key type=file mode=0600 uname=root gname=wheel optional
|
|
|
ssh_host_dsa_key.pub type=file mode=0644 uname=root gname=wheel optional
|
|
|
ssh_host_ecdsa_key type=file mode=0600 uname=root gname=wheel optional
|
|
|
ssh_host_ecdsa_key.pub type=file mode=0644 uname=root gname=wheel optional
|
|
|
ssh_host_ed25519_key type=file mode=0600 uname=root gname=wheel optional
|
|
|
ssh_host_ed25519_key.pub type=file mode=0644 uname=root gname=wheel optional
|
|
|
ssh_host_key type=file mode=0600 uname=root gname=wheel optional
|
|
|
ssh_host_key.pub type=file mode=0644 uname=root gname=wheel optional
|
|
|
ssh_host_rsa_key type=file mode=0600 uname=root gname=wheel optional
|
|
|
ssh_host_rsa_key.pub type=file mode=0644 uname=root gname=wheel optional
|
|
|
sshd_config type=file mode=0644 uname=root gname=wheel
|
|
|
.. #ssh
|
|
|
syslog.conf type=file mode=0644 uname=root gname=wheel
|
|
|
ttys type=file mode=0644 uname=root gname=wheel
|
|
|
vm.conf type=file mode=0644 uname=root gname=wheel optional
|
|
|
weekly type=file mode=0644 uname=root gname=wheel
|
|
|
weekly.local type=file mode=0644 uname=root gname=wheel optional
|
|
|
ypldap.conf type=file mode=0600 uname=root gname=wheel optional
|
|
|
.. #etc
|
|
|
|
|
|
root type=dir mode=0700 uname=root gname=wheel
|
|
|
.cshrc type=file mode=0644 uname=root gname=wheel
|
|
|
.login type=file mode=0644 uname=root gname=wheel
|
|
|
.profile type=file mode=0644 uname=root gname=wheel
|
|
|
.rhosts type=file mode=0600 uname=root gname=wheel optional
|
|
|
.ssh type=dir mode=0700 uname=root gname=wheel
|
|
|
authorized_keys type=file mode=0600 uname=root gname=wheel
|
|
|
.. #root/.ssh
|
|
|
.. #root
|
|
|
|
|
|
sbin type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #sbin
|
|
|
|
|
|
usr type=dir mode=0755 uname=root gname=wheel
|
|
|
bin type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/bin
|
|
|
games type=dir mode=0755 uname=root gname=wheel optional
|
|
|
.. #usr/games
|
|
|
include type=dir mode=0755 uname=root gname=bin ignore
|
|
|
.. #usr/include
|
|
|
lib type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/lib
|
|
|
libdata type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/libdata
|
|
|
libexec type=dir mode=0755 uname=root gname=wheel
|
|
|
auth type=dir mode=0750 uname=root gname=auth ignore
|
|
|
.. #usr/libexec/auth
|
|
|
.. #usr/libexec
|
|
|
local type=dir mode=0755 uname=root gname=wheel
|
|
|
bin type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/local/bin
|
|
|
lib type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/local/lib
|
|
|
.. #usr/local
|
|
|
sbin type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/sbin
|
|
|
share type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #usr/share
|
|
|
.. #usr
|
|
|
|
|
|
var type=dir mode=0755 uname=root gname=wheel
|
|
|
account type=dir mode=0755 uname=root gname=wheel
|
|
|
acct type=file mode=0644 uname=root gname=wheel optional
|
|
|
.. #var/account
|
|
|
yp type=dir mode=0755 uname=root gname=wheel optional ignore
|
|
|
.. #var/yp
|
|
|
backups type=dir mode=0700 uname=root gname=wheel ignore
|
|
|
.. #var/backups
|
|
|
cron type=dir mode=0555 uname=root gname=wheel
|
|
|
log type=file mode=0600 uname=root gname=wheel
|
|
|
atjobs type=dir mode=01770 uname=root gname=crontab ignore
|
|
|
.. #var/cron/atjobs
|
|
|
tabs type=dir mode=01730 uname=root gname=crontab ignore
|
|
|
.. #var/cron/tabs
|
|
|
.. #var/cron
|
|
|
db type=dir mode=0755 uname=root gname=wheel
|
|
|
host.random type=file mode=0600 uname=root gname=wheel optional
|
|
|
kvm_bsd.db type=file mode=0640 uname=root gname=kmem
|
|
|
.. #var/db
|
|
|
log type=dir mode=0755 uname=root gname=wheel
|
|
|
authlog type=file mode=0640 uname=root gname=wheel
|
|
|
secure type=file mode=0600 uname=root gname=wheel
|
|
|
wtmp type=file mode=0644 uname=root gname=wheel
|
|
|
lastlog type=file mode=0644 uname=root gname=wheel
|
|
|
.. #var/log
|
|
|
mail type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #var/mail
|
|
|
nsd type=dir mode=0755 uname=root gname=wheel
|
|
|
etc type=dir mode=0750 uname=root gname=_nsd
|
|
|
.. #var/nsd/etc
|
|
|
.. #var/nsd
|
|
|
run type=dir mode=0755 uname=root gname=wheel
|
|
|
utmp type=file mode=0664 uname=root gname=utmp
|
|
|
.. #var/run
|
|
|
spool type=dir mode=0755 uname=root gname=wheel
|
|
|
ftp type=dir mode=0555 uname=root gname=wheel optional
|
|
|
bin type=dir mode=0511 uname=root gname=wheel optional
|
|
|
.. #var/spool/ftp/bin
|
|
|
etc type=dir mode=0511 uname=root gname=wheel optional
|
|
|
group type=file mode=0444 uname=root gname=wheel optional
|
|
|
localtime type=file mode=0444 uname=root gname=wheel optional
|
|
|
master.passwd type=file mode=0400 uname=root gname=wheel optional
|
|
|
spwd.db type=file mode=0400 uname=root gname=wheel optional
|
|
|
motd type=file mode=0444 uname=root gname=wheel optional
|
|
|
passwd type=file mode=0444 uname=root gname=wheel optional
|
|
|
pwd.db type=file mode=0444 uname=root gname=wheel optional
|
|
|
.. #var/spool/ftp/etc
|
|
|
hidden type=dir mode=0111 uname=root gname=wheel optional ignore
|
|
|
.. #var/spool/ftp/hidden
|
|
|
pub type=dir mode=0555 uname=root gname=wheel optional ignore
|
|
|
.. #var/spool/ftp/pub
|
|
|
.. #var/spool/ftp
|
|
|
output type=dir mode=0755 uname=root gname=wheel ignore
|
|
|
.. #var/spool/output
|
|
|
.. #var/spool
|