On Thu, 9 May 2002 20:08:33 +0200 Oden Eriksson
<[EMAIL PROTECTED]> wrote:

> On Thursdayen den 9 May 2002 18.57, Pierre Fortin wrote:
> > Hi,
> >
> > This is in LM8.2...  Can future msec releases please be setup to allow
> > users to use "ln -s /home/root /root"...?
> >
> > I don't like losing my root files when I upgrade, so I setup a
> > /home/root directory.  While checking my logs, I noticed this...
> >
> > May  9 07:01:49 woody msec: changed mode of /home/root from 700 to 755
> > May  9 08:01:47 woody msec: changed mode of /root from 755 to 700
> > May  9 09:01:36 woody msec: changed mode of /home/root from 700 to 755
> > May  9 10:02:47 woody msec: changed mode of /root from 755 to 700
> > May  9 11:02:00 woody msec: changed mode of /home/root from 700 to 755
> > May  9 12:01:51 woody msec: changed mode of /root from 755 to 700
> >
> > Besides, changing user accounts to go+rx is NOT very nice, or
> > security-minded, IMHO...
> 
> 711 on /home/* is enough for, for example apache..

My preference is to not make *any* directory more open by any automated
process.  If I choose 700 for /home/root, I consider it a security issue
for something like msec to make it less secure behind my back.

Cheers,
Pierre

Reply via email to