Following a client's security update to various hpux servers, its now
my turn to do similar things to their historical sun servers. Its
nothing too deep but we are having a debate over whether their current
permissions on their cron.allow and cron.deny files are in fact
"default" for solaris or not (solaris 9).

current perms are 644, which seems sensible to me.

I've googled for a "definitive" default perms for these files but to no
avail... anybody have any other ideas?

cheers

ian

didds wrote:
> current perms are 644, which seems sensible to me.
>
> I've googled for a "definitive" default perms for these files but to no
> avail... anybody have any other ideas?

% grep cron.deny /var/sadm/install/contents
/etc/cron.d/cron.deny e preserve 0644 root sys 45 4171 1018133064 SUNWcsr

didds wrote:
> Following a client's security update to various hpux servers, its now
> my turn to do similar things to their historical sun servers. Its
> nothing too deep but we are having a debate over whether their current
> permissions on their cron.allow and cron.deny files are in fact
> "default" for solaris or not (solaris 9).
>
> current perms are 644, which seems sensible to me.
>
> I've googled for a "definitive" default perms for these files but to no
> avail... anybody have any other ideas?
>
> cheers
>
> ian
>

I've Solaris 10 and have never bothered touching those files (its a home
computer, so I have no need to). But there is no cron.allow, only a
cron.deny.


teal /etc % ls -l /etc/cron.d
total 6
prw------- 1 root root 0 Aug 4 09:44 FIFO
-rw-r--r-- 1 root sys 40 Jan 21 2005 at.deny
-rw-r--r-- 1 root sys 40 Jan 21 2005 cron.deny
-rw-r--r-- 1 root sys 17 Jan 21 2005 queuedefs



--
Dave (from the UK)

Please note my email address changes periodically to avoid spam.
It is always of the form: month-year@southminster-branch-line.org.uk
Hitting reply will work for a few months only - later set it manually.

http://witm.sourceforge.net/ (Web based Mathematica front end)

Oscar del Rio wrote:
> didds wrote:
> > current perms are 644, which seems sensible to me.
> >
> > I've googled for a "definitive" default perms for these files but to no
> > avail... anybody have any other ideas?
>
> % grep cron.deny /var/sadm/install/contents
> /etc/cron.d/cron.deny e preserve 0644 root sys 45 4171 1018133064 SUNWcsr

Or you can use pkgchk -l -p full-path-name-of file-in-question