The line in etc/mtree/special should be updated as well.

  npppd.conf      type=file mode=0640 uname=root gname=wheel

other than that, ok yasuoka

On Sun, 21 Jun 2020 16:48:44 +0300
Vitaliy Makkoveev <[email protected]> wrote:
> We installing `npppd-users' with uid:gid root:wheel and mode 0600
> because it consists sensitive data but mode for npppd.conf is 0640.
> npppd.conf can also have radius passwords and nothing requires to allow
> it be readable by group. So set it's permissions to 0600.
> 
> Index: usr.sbin/npppd/Makefile
> ===================================================================
> RCS file: /cvs/src/usr.sbin/npppd/Makefile,v
> retrieving revision 1.6
> diff -u -p -r1.6 Makefile
> --- usr.sbin/npppd/Makefile   14 Mar 2013 16:20:46 -0000      1.6
> +++ usr.sbin/npppd/Makefile   21 Jun 2020 13:37:50 -0000
> @@ -6,7 +6,7 @@
>  SUBDIR+=     npppd
>  
>  distribution:
> -     ${INSTALL} -C -o root -g wheel -m 0640 ${.CURDIR}/npppd/npppd.conf \
> +     ${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd.conf \
>           ${DESTDIR}/etc/npppd/npppd.conf
>       ${INSTALL} -C -o root -g wheel -m 0600 ${.CURDIR}/npppd/npppd-users \
>           ${DESTDIR}/etc/npppd/npppd-users

Reply via email to