Re: install npppd.conf with mode 0600

[Vitaliy Makkoveev]

On Mon, Jun 22, 2020 at 02:57:53PM +0900, YASUOKA Masahiko wrote:
> The line in etc/mtree/special should be updated as well.
> 
>   npppd.conf  type=file mode=0640 uname=root gname=wheel
> 
> other than that, ok yasuoka

Thanks for pointing.

Re: install npppd.conf with mode 0600

[YASUOKA Masahiko]

The line in etc/mtree/special should be updated as well.

  npppd.conf  type=file mode=0640 uname=root gname=wheel

other than that, ok yasuoka

On Sun, 21 Jun 2020 16:48:44 +0300
Vitaliy Makkoveev  wrote:
> We installing `npppd-users' with uid:gid root:wheel and mode 0600
> because it consists sensitive data but mode for npppd.conf is 0640.
> npppd.conf can also have radius passwords and nothing requires to allow
> it be readable by group. So set it's permissions to 0600.
> 
> Index: usr.sbin/npppd/Makefile
> ===
> RCS file: /cvs/src/usr.sbin/npppd/Makefile,v
> retrieving revision 1.6
> diff -u -p -r1.6 Makefile
> --- usr.sbin/npppd/Makefile   14 Mar 2013 16:20:46 -  1.6
> +++ usr.sbin/npppd/Makefile   21 Jun 2020 13:37:50 -
> @@ -6,7 +6,7 @@
>  SUBDIR+= npppd
>  
>  distribution:
> - ${INSTALL} -C -o root -g wheel -m 0640 ${.CURDIR}/npppd/npppd.conf \
> + ${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd.conf \
>   ${DESTDIR}/etc/npppd/npppd.conf
>   ${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd-users \
>   ${DESTDIR}/etc/npppd/npppd-users

install npppd.conf with mode 0600

[Vitaliy Makkoveev]

We installing `npppd-users' with uid:gid root:wheel and mode 0600
because it consists sensitive data but mode for npppd.conf is 0640.
npppd.conf can also have radius passwords and nothing requires to allow
it be readable by group. So set it's permissions to 0600.

Index: usr.sbin/npppd/Makefile
===
RCS file: /cvs/src/usr.sbin/npppd/Makefile,v
retrieving revision 1.6
diff -u -p -r1.6 Makefile
--- usr.sbin/npppd/Makefile 14 Mar 2013 16:20:46 -  1.6
+++ usr.sbin/npppd/Makefile 21 Jun 2020 13:37:50 -
@@ -6,7 +6,7 @@
 SUBDIR+=   npppd
 
 distribution:
-   ${INSTALL} -C -o root -g wheel -m 0640 ${.CURDIR}/npppd/npppd.conf \
+   ${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd.conf \
${DESTDIR}/etc/npppd/npppd.conf
${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd-users \
${DESTDIR}/etc/npppd/npppd-users