Re: negative group permissions?

On Tue, Feb 28, 2012 at 03:07:43PM +0000, jb wrote:
> Anton Shterenlikht <mexas <at> bristol.ac.uk> writes:
> 
> > 
> > This was discussed in questions_at_ with no resolution.
> > Anybody here can advise further?
> > ...
> 
> Regarding file .seq or .SEQ
> 
> It is an intermediate-processing (run-time) lockfile found in various spool 
> dirs and their sub-dirs, like
> /var/spool/cron/
>           /at,
>           /lpd, etc.
> It is used to save job# by the respective programs (cron, at, etc).
> You can find a ref to .SEQ in file at.c in at port sources.
> I did not see ref to .seq in lpr or cron port sources.
> 
> The periodic security check 
> /etc/periodic/security/110.neggrpperm
> checks for risque condition like
> ! -perm +010 -and -perm +001
> 
> The file should not be executable, according to its purpose.
> 
> So the lpr.c should be changed from
> if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) {
> to
> if ((fd = open(buf, O_RDWR|O_CREAT, 0660)) < 0) {
> 
> File a bug report.

http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/165533

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423