[DRBD-announce] [SECURITY] permissions on automatically generated /dev/drbdX

[Philipp Reisner]

----------  Forwarded Message  ----------

Subject: [DRBD-user] [SECURITY] permissions on automatically 
generated /dev/drbdX
Date: Monday 27 September 2004 19:51
From: Lars Ellenberg <Lars.Ellenberg at linbit.com>
To: drbd-user at lists.linbit.com

I just noticed that the permissions on /dev/drbdX generated during make
install (or by the debian, rpm, gentoo scripts for that matter) where
dependend on the umask, and may lead to globally accessable devices,
which may be a security risk.
  brw-rw-r--    1 root     root     147,   0 2004-09-27 14:06 /dev/drbd0

please all verify and if neccessary, do chmod 0660 /dev/drbd* !

I changed all mknod $something in svn to mknod -m 0660 $samething.

thanks,


 Lars Ellenberg