Re: negative group permissions?

From: jb <jb.1234abcd_at_gmail.com>
Date: Tue, 28 Feb 2012 15:07:43 +0000 (UTC)
Anton Shterenlikht <mexas <at> bristol.ac.uk> writes:

> 
> This was discussed in questions_at_ with no resolution.
> Anybody here can advise further?
> ...

Regarding file .seq or .SEQ

It is an intermediate-processing (run-time) lockfile found in various spool 
dirs and their sub-dirs, like
/var/spool/cron/
          /at,
          /lpd, etc.
It is used to save job# by the respective programs (cron, at, etc).
You can find a ref to .SEQ in file at.c in at port sources.
I did not see ref to .seq in lpr or cron port sources.

The periodic security check 
/etc/periodic/security/110.neggrpperm
checks for risque condition like
! -perm +010 -and -perm +001

The file should not be executable, according to its purpose.

So the lpr.c should be changed from
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) {
to
if ((fd = open(buf, O_RDWR|O_CREAT, 0660)) < 0) {

File a bug report.
jb
Received on Tue Feb 28 2012 - 14:10:07 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:24 UTC