base-passwd: postinstall script too open permissions

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Aug 20 08:13:00 GMT 2008


Hi John,

do you remember the reason why the passwd-grp.sh postinstall script
calls

  chmod 777 /etc/passwd
  chmod 777 /etc/group

?  That's not right, IMO.  The permissions should rather be 644 and
not allow writing for everyone.

Along the same lines, the `chmod a+w' calls in the second half of the
script should better just be `chmod u+w'.

Would you mind to change that, please?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat



More information about the Cygwin-apps mailing list