Package: initscripts
Version: 2.86.ds1-14
Severity: wishlist

The default TTYMODE as defined in /etc/init.d/mountdevsubfs.sh and
/etc/default/devpts is 620, resulting in a default of 'mesg y' for any
pseudo terminal.
/etc/login.defs from the login package however contains the following

--8<---

# In Debian /usr/bin/bsd-write or similar programs are setgid tty
# However, the default and recommended value for TTYPERM is still 0600
# to not allow anyone to write to anyone else console or terminal

# Users can still allow other people to write them by issuing
# the "mesg y" command.

TTYGROUP        tty
TTYPERM         0600

--8<---

which applies to the non-pseudo terminals and translates into the
opposite default of 'mesg n' for these.

The default should rather be consistent though, so I suggest to change
the TTYMODE default to 0600 too.

elmar

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-bdclaim
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages initscripts depends on:
ii  debianutils   2.16                       Miscellaneous utilities specific t
ii  e2fsprogs     1.38+1.39-WIP-2006.04.09-1 ext2 file system utilities and lib
ii  libc6         2.3.6-7                    GNU C Library: Shared libraries
ii  lsb-base      3.1-5                      Linux Standard Base 3.1 init scrip
ii  mount         2.12r-9                    Tools for mounting and manipulatin

initscripts recommends no packages.

-- no debconf information

-- 

 .'"`.                                                            /"\
| :' :   Elmar Hoffmann <[EMAIL PROTECTED]>    ASCII Ribbon Campaign  \ /
`. `'    GPG key available via pgp.net        against HTML email   X
  `-                                                    & vCards  / \

Attachment: signature.asc
Description: Digital signature

Reply via email to