Mailing List Archive

[SECURITY] permissions on automatically generated /dev/drbdX
---------- Forwarded Message ----------

Subject: [DRBD-user] [SECURITY] permissions on automatically
generated /dev/drbdX
Date: Monday 27 September 2004 19:51
From: Lars Ellenberg <Lars.Ellenberg@linbit.com>
To: drbd-user@lists.linbit.com

I just noticed that the permissions on /dev/drbdX generated during make
install (or by the debian, rpm, gentoo scripts for that matter) where
dependend on the umask, and may lead to globally accessable devices,
which may be a security risk.
brw-rw-r-- 1 root root 147, 0 2004-09-27 14:06 /dev/drbd0

please all verify and if neccessary, do chmod 0660 /dev/drbd* !

I changed all mknod $something in svn to mknod -m 0660 $samething.

thanks,


Lars Ellenberg
_______________________________________________
drbd-announce mailing list
drbd-announce@lists.linbit.com
http://lists.linbit.com/mailman/listinfo/drbd-announce