On Thu, Jan 13, 2011 at 12:13:14AM +0100, Claudio Jeker wrote: > On Wed, Jan 12, 2011 at 11:57:59PM +0100, Martin Pelikan wrote: > > Hello, > > this patch makes ospfd(8) and ospf6d(8) check its config file permissions > > even if run with a -n to test it. bgpd already behaves this way (changed > > 6 years ago by henning@) and it's quite handy to fix the permissions while > > doing tests, rather than at the first production boot time :-) > > Any comments? > > Appart from my desire to kill the permission checking? > I don't see why bgpd and ospfd needs this non-unix like behaviour, > other tools like pfctl do not care. We install the file with the correct > permissions so if somebody changes them it is his fault. But this is just > my opinion.
For what it's worth this is already checked via mtree in /etc/security
