Home | History | Annotate | Line # | Download | only in mtree
special revision 1.50 
      1 #	$NetBSD: special,v 1.50 2002/02/03 08:33:14 veego Exp $
      2 #	@(#)special	8.2 (Berkeley) 1/23/94
      3 #
      4 # Hand-crafted mtree specification for the dangerous files.
      5 #
      6 # /etc/security checks:
      7 #	- All of these are checked if $check_mtree is enabled.
      8 #	- Files with "nodiff" tags are highlighted if they change.
      9 #	- Files without "nodiff" or "exclude" tags are displayed
     10 #	  with diff(1)s if $check_changelist is enabled.
     11 #
     12 
     13 /set uname=root gname=wheel
     14 
     15 .				type=dir  mode=0755
     16 
     17 ./dev				type=dir  mode=0755
     18 ./dev/drum			type=char mode=0640 gname=kmem
     19 ./dev/fd			type=dir  mode=0755 ignore
     20 ./dev/kmem			type=char mode=0640 gname=kmem
     21 ./dev/mem			type=char mode=0640 gname=kmem
     22 
     23 ./etc				type=dir  mode=0755
     24 ./etc/Distfile			type=file mode=0644 optional
     25 ./etc/amd			type=dir  mode=0755 optional
     26 ./etc/apm			type=dir  mode=0755 optional
     27 ./etc/bootparams		type=file mode=0644 optional
     28 ./etc/bootptab			type=file mode=0644 optional
     29 ./etc/ccd.conf			type=file mode=0644 optional
     30 ./etc/changelist		type=file mode=0644
     31 ./etc/crontab			type=file mode=0644 optional
     32 ./etc/csh.cshrc			type=file mode=0644
     33 ./etc/csh.login			type=file mode=0644
     34 ./etc/csh.logout		type=file mode=0644
     35 ./etc/daily			type=file mode=0644
     36 ./etc/daily.conf		type=file mode=0644
     37 ./etc/daily.local		type=file mode=0644 optional
     38 ./etc/defaultdomain		type=file mode=0644 optional
     39 ./etc/defaults			type=dir  mode=0755
     40 ./etc/defaults/daily.conf	type=file mode=0444
     41 ./etc/defaults/monthly.conf	type=file mode=0444
     42 ./etc/defaults/rc.conf		type=file mode=0444
     43 ./etc/defaults/security.conf	type=file mode=0444
     44 ./etc/defaults/weekly.conf	type=file mode=0444
     45 ./etc/dhclient-enter-hooks	type=file mode=0644 optional
     46 ./etc/dhclient-exit-hooks	type=file mode=0644 optional
     47 ./etc/dhclient.conf		type=file mode=0644 optional
     48 ./etc/dhcpd.conf		type=file mode=0644 optional
     49 ./etc/disktab			type=file mode=0644
     50 ./etc/dm.conf			type=file mode=0644
     51 ./etc/dumpdates			type=file mode=0664 gname=operator optional
     52 ./etc/ethers			type=file mode=0644 optional
     53 ./etc/exports			type=file mode=0644 optional
     54 ./etc/floppytab			type=file mode=0644
     55 ./etc/fstab			type=file mode=0644
     56 ./etc/ftpchroot			type=file mode=0644
     57 ./etc/ftpd.conf			type=file mode=0644 optional
     58 ./etc/ftpusers			type=file mode=0644
     59 ./etc/ftpwelcome		type=file mode=0644 optional
     60 ./etc/gateways			type=file mode=0644 optional
     61 ./etc/gettytab			type=file mode=0644
     62 ./etc/group			type=file mode=0644
     63 ./etc/hesiod.conf		type=file mode=0644 optional
     64 ./etc/hosts			type=file mode=0644
     65 ./etc/hosts.allow		type=file mode=0644 optional
     66 ./etc/hosts.deny		type=file mode=0644 optional
     67 ./etc/hosts.equiv		type=file mode=0600 optional
     68 ./etc/hosts.lpd			type=file mode=0644 optional
     69 ./etc/ifaliases			type=file mode=0644 optional
     70 ./etc/inetd.conf		type=file mode=0644
     71 ./etc/ipf.conf			type=file mode=0644 optional
     72 ./etc/ipnat.conf		type=file mode=0644 optional
     73 ./etc/ipsec.conf		type=file mode=0644 optional
     74 ./etc/kerberosIV		type=dir  mode=0755 ignore optional
     75 ./etc/ld.so.conf		type=file mode=0644 optional
     76 ./etc/lkm.conf			type=file mode=0644 optional
     77 ./etc/localtime			type=link mode=0755
     78 ./etc/login.conf		type=file mode=0644 optional
     79 ./etc/mail			type=dir  mode=0755
     80 ./etc/mail/aliases		type=file mode=0644
     81 ./etc/mail/aliases.db		type=file mode=0644 tags=exclude
     82 ./etc/mail/helpfile		type=file mode=0444
     83 ./etc/mail/local-host-names	type=file mode=0644 optional
     84 ./etc/mail/sendmail.cf		type=file mode=0444
     85 ./etc/mail.rc			type=file mode=0644
     86 ./etc/mailer.conf		type=file mode=0644
     87 ./etc/man.conf			type=file mode=0644
     88 ./etc/master.passwd		type=file mode=0600 tags=nodiff
     89 ./etc/mk.conf			type=file mode=0644
     90 ./etc/moduli			type=file mode=0444
     91 ./etc/monthly			type=file mode=0644
     92 ./etc/monthly.conf		type=file mode=0644
     93 ./etc/monthly.local		type=file mode=0644 optional
     94 ./etc/mrouted.conf		type=file mode=0644
     95 ./etc/mtree			type=dir  mode=0755
     96 ./etc/mtree/special		type=file mode=0444
     97 ./etc/mtree/special.local	type=file mode=0644 optional
     98 ./etc/mygate			type=file mode=0644 optional
     99 ./etc/myname			type=file mode=0644 optional
    100 ./etc/named.conf		type=file mode=0644 optional
    101 ./etc/namedb			type=dir  mode=0755
    102 ./etc/netconfig			type=file mode=0644
    103 ./etc/netgroup			type=file mode=0644 optional
    104 ./etc/netgroup.db		type=file mode=0644 optional tags=exclude
    105 ./etc/netstart.local		type=file mode=0644 optional
    106 ./etc/networks			type=file mode=0644
    107 ./etc/newsyslog.conf		type=file mode=0644
    108 ./etc/nsswitch.conf		type=file mode=0644
    109 ./etc/ntp.conf			type=file mode=0644 optional
    110 ./etc/passwd			type=file mode=0644
    111 ./etc/passwd.conf		type=file mode=0644 optional
    112 ./etc/phones			type=file mode=0644
    113 ./etc/ppp			type=dir  mode=0755 optional
    114 ./etc/ppp/options		type=file mode=0644 optional
    115 ./etc/printcap			type=file mode=0644
    116 ./etc/profile			type=file mode=0644
    117 ./etc/protocols			type=file mode=0644
    118 ./etc/rbootd.conf		type=file mode=0644 optional
    119 ./etc/rc			type=file mode=0644
    120 ./etc/rc.conf			type=file mode=0644
    121 ./etc/rc.d			type=dir  mode=0755
    122 ./etc/rc.d/DAEMON		type=file mode=0555
    123 ./etc/rc.d/LOGIN		type=file mode=0555
    124 ./etc/rc.d/NETWORKING		type=file mode=0555
    125 ./etc/rc.d/SERVERS		type=file mode=0555
    126 ./etc/rc.d/accounting		type=file mode=0555
    127 ./etc/rc.d/altqd		type=file mode=0555
    128 ./etc/rc.d/amd			type=file mode=0555
    129 ./etc/rc.d/apmd			type=file mode=0555
    130 ./etc/rc.d/bootconf.sh		type=file mode=0555
    131 ./etc/rc.d/bootparams		type=file mode=0555
    132 ./etc/rc.d/ccd			type=file mode=0555
    133 ./etc/rc.d/cleartmp		type=file mode=0555
    134 ./etc/rc.d/cron			type=file mode=0555
    135 ./etc/rc.d/dhclient		type=file mode=0555
    136 ./etc/rc.d/dhcpd		type=file mode=0555
    137 ./etc/rc.d/dhcrelay		type=file mode=0555
    138 ./etc/rc.d/dmesg		type=file mode=0555
    139 ./etc/rc.d/downinterfaces	type=file mode=0555
    140 ./etc/rc.d/fsck			type=file mode=0555
    141 ./etc/rc.d/inetd		type=file mode=0555
    142 ./etc/rc.d/ipfilter		type=file mode=0555
    143 ./etc/rc.d/ipmon		type=file mode=0555
    144 ./etc/rc.d/ipnat		type=file mode=0555
    145 ./etc/rc.d/ipsec		type=file mode=0555
    146 ./etc/rc.d/isdnd		type=file mode=0555
    147 ./etc/rc.d/kdc			type=file mode=0555
    148 ./etc/rc.d/ldconfig		type=file mode=0555
    149 ./etc/rc.d/lkm1			type=file mode=0555
    150 ./etc/rc.d/lkm2			type=file mode=0555
    151 ./etc/rc.d/lkm3			type=file mode=0555
    152 ./etc/rc.d/local		type=file mode=0555
    153 ./etc/rc.d/lpd			type=file mode=0555
    154 ./etc/rc.d/mopd			type=file mode=0555
    155 ./etc/rc.d/motd			type=file mode=0555
    156 ./etc/rc.d/mountall		type=file mode=0555
    157 ./etc/rc.d/mountcritlocal	type=file mode=0555
    158 ./etc/rc.d/mountcritremote	type=file mode=0555
    159 ./etc/rc.d/mountd		type=file mode=0555
    160 ./etc/rc.d/mrouted		type=file mode=0555
    161 ./etc/rc.d/named		type=file mode=0555
    162 ./etc/rc.d/ndbootd		type=file mode=0555
    163 ./etc/rc.d/network		type=file mode=0555
    164 ./etc/rc.d/newsyslog		type=file mode=0555
    165 ./etc/rc.d/nfsd			type=file mode=0555
    166 ./etc/rc.d/nfslocking		type=file mode=0555
    167 ./etc/rc.d/ntpd			type=file mode=0555
    168 ./etc/rc.d/ntpdate		type=file mode=0555
    169 ./etc/rc.d/poffd		type=file mode=0555
    170 ./etc/rc.d/postfix		type=file mode=0555
    171 ./etc/rc.d/ppp			type=file mode=0555
    172 ./etc/rc.d/pwcheck		type=file mode=0555
    173 ./etc/rc.d/quota		type=file mode=0555
    174 ./etc/rc.d/racoon		type=file mode=0555
    175 ./etc/rc.d/raidframe		type=file mode=0555
    176 ./etc/rc.d/rarpd		type=file mode=0555
    177 ./etc/rc.d/rbootd		type=file mode=0555
    178 ./etc/rc.d/root			type=file mode=0555
    179 ./etc/rc.d/route6d		type=file mode=0555
    180 ./etc/rc.d/routed		type=file mode=0555
    181 ./etc/rc.d/rpcbind		type=file mode=0555
    182 ./etc/rc.d/rtadvd		type=file mode=0555
    183 ./etc/rc.d/rtsold		type=file mode=0555
    184 ./etc/rc.d/rwho			type=file mode=0555
    185 ./etc/rc.d/savecore		type=file mode=0555
    186 ./etc/rc.d/screenblank		type=file mode=0555
    187 ./etc/rc.d/securelevel		type=file mode=0555
    188 ./etc/rc.d/sendmail		type=file mode=0555
    189 ./etc/rc.d/sshd			type=file mode=0555
    190 ./etc/rc.d/swap1		type=file mode=0555
    191 ./etc/rc.d/swap2		type=file mode=0555
    192 ./etc/rc.d/sysctl		type=file mode=0555
    193 ./etc/rc.d/sysdb		type=file mode=0555
    194 ./etc/rc.d/syslogd		type=file mode=0555
    195 ./etc/rc.d/timed		type=file mode=0555
    196 ./etc/rc.d/ttys			type=file mode=0555
    197 ./etc/rc.d/virecover		type=file mode=0555
    198 ./etc/rc.d/wscons		type=file mode=0555
    199 ./etc/rc.d/xdm			type=file mode=0555
    200 ./etc/rc.d/xfs			type=file mode=0555
    201 ./etc/rc.d/ypbind		type=file mode=0555
    202 ./etc/rc.d/yppasswdd		type=file mode=0555
    203 ./etc/rc.d/ypserv		type=file mode=0555
    204 ./etc/rc.lkm			type=file mode=0644
    205 ./etc/rc.local			type=file mode=0644 optional
    206 ./etc/rc.shutdown		type=file mode=0644
    207 ./etc/rc.shutdown.local		type=file mode=0644 optional
    208 ./etc/rc.subr			type=file mode=0644
    209 ./etc/remote			type=file mode=0644
    210 ./etc/resolv.conf		type=file mode=0644 optional
    211 ./etc/rpc			type=file mode=0644
    212 ./etc/rtadvd.conf		type=file mode=0644 optional
    213 ./etc/security			type=file mode=0644
    214 ./etc/security.conf		type=file mode=0644
    215 ./etc/security.local		type=file mode=0644 optional
    216 ./etc/services			type=file mode=0644
    217 ./etc/shells			type=file mode=0644
    218 ./etc/shosts.equiv		type=file mode=0600 optional
    219 ./etc/spwd.db			type=file mode=0600 tags=exclude
    220 ./etc/ssh.conf			type=file mode=0644 optional
    221 ./etc/ssh_host_dsa_key		type=file mode=0600 optional tags=nodiff
    222 ./etc/ssh_host_dsa_key.pub	type=file mode=0644 optional
    223 ./etc/ssh_host_key		type=file mode=0600 optional tags=nodiff
    224 ./etc/ssh_host_key.pub		type=file mode=0644 optional
    225 ./etc/ssh_host_rsa_key		type=file mode=0600 optional tags=nodiff
    226 ./etc/ssh_host_rsa_key.pub	type=file mode=0644 optional
    227 ./etc/ssh_known_hosts		type=file mode=0644 optional
    228 ./etc/ssh_known_hosts2		type=file mode=0644 optional
    229 ./etc/sshd.conf			type=file mode=0644 optional
    230 ./etc/sysctl.conf		type=file mode=0644
    231 ./etc/syslog.conf		type=file mode=0644
    232 ./etc/ttyaction			type=file mode=0644 optional
    233 ./etc/ttys			type=file mode=0644
    234 ./etc/usermgmt.conf		type=file mode=0644 optional
    235 ./etc/weekly			type=file mode=0644
    236 ./etc/weekly.conf		type=file mode=0644
    237 ./etc/weekly.local		type=file mode=0644 optional
    238 ./etc/wscons.conf		type=file mode=0644
    239 
    240 ./root				type=dir  mode=0755
    241 ./root/.cshrc			type=file mode=0644
    242 ./root/.klogin			type=file mode=0600 optional
    243 ./root/.login			type=file mode=0644
    244 ./root/.profile			type=file mode=0644
    245 ./root/.rhosts			type=file mode=0600 optional
    246 ./root/.shosts			type=file mode=0600 optional
    247 ./root/.ssh			type=dir  mode=0700 optional
    248 ./root/.ssh/authorized_keys	type=file mode=0600 optional
    249 ./root/.ssh/authorized_keys2	type=file mode=0600 optional
    250 ./root/.ssh/config		type=file mode=0644 optional
    251 ./root/.ssh/id_dsa		type=file mode=0600 optional tags=nodiff
    252 ./root/.ssh/id_dsa.pub		type=file mode=0644 optional
    253 ./root/.ssh/id_rsa		type=file mode=0600 optional tags=nodiff
    254 ./root/.ssh/id_rsa.pub		type=file mode=0644 optional
    255 ./root/.ssh/identity		type=file mode=0600 optional tags=nodiff
    256 ./root/.ssh/identity.pub	type=file mode=0644 optional
    257 ./root/.ssh/known_hosts		type=file mode=0644 optional
    258 ./root/.ssh/known_hosts2	type=file mode=0644 optional
    259 
    260 ./sbin				type=dir  mode=0755 ignore
    261 
    262 ./usr				type=dir  mode=0755
    263 ./usr/bin			type=dir  mode=0755 ignore
    264 ./usr/games			type=dir  mode=0755 optional
    265 ./usr/games/hide		type=dir  mode=0750 gname=games ignore optional
    266 ./usr/include			type=dir  mode=0755 ignore
    267 ./usr/lib			type=dir  mode=0755 ignore
    268 ./usr/libdata			type=dir  mode=0755 ignore
    269 ./usr/libexec			type=dir  mode=0755 ignore
    270 ./usr/local			type=dir  mode=0755
    271 ./usr/local/bin			type=dir  mode=0755 ignore
    272 ./usr/local/lib			type=dir  mode=0755 ignore
    273 ./usr/pkg			type=dir  mode=0755 ignore optional
    274 ./usr/sbin			type=dir  mode=0755 ignore
    275 ./usr/share			type=dir  mode=0755 ignore
    276 
    277 ./var				type=dir  mode=0755
    278 ./var/account			type=dir  mode=0755
    279 ./var/account/acct		type=file mode=0644 optional tags=exclude
    280 ./var/at			type=dir  mode=0755 ignore
    281 ./var/backups			type=dir  mode=0755 ignore
    282 ./var/cron			type=dir  mode=0755
    283 ./var/cron/tabs			type=dir  mode=0700
    284 ./var/cron/tabs/root		type=file mode=0600
    285 ./var/db			type=dir  mode=0755
    286 ./var/db/kvm.db			type=file mode=0644 tags=exclude
    287 ./var/log			type=dir  mode=0755
    288 ./var/log/authlog		type=file mode=0600 optional tags=exclude
    289 ./var/log/wtmp			type=file mode=0644 tags=exclude
    290 ./var/mail			type=dir  mode=1777 ignore
    291 ./var/preserve			type=dir  mode=0755 ignore
    292 ./var/run			type=dir  mode=0755
    293 ./var/run/utmp			type=file mode=0664 gname=utmp tags=exclude
    294 ./var/spool			type=dir  mode=0755
    295 ./var/spool/ftp			type=dir  mode=0755 optional
    296 ./var/spool/ftp/bin		type=dir  mode=0755 optional
    297 ./var/spool/ftp/bin/ls		type=file mode=0555 optional
    298 ./var/spool/ftp/etc		type=dir  mode=0755 optional
    299 ./var/spool/ftp/etc/group		type=file mode=0644 optional
    300 ./var/spool/ftp/etc/localtime		type=file mode=0644 optional
    301 ./var/spool/ftp/etc/master.passwd	type=file mode=0600 optional
    302 ./var/spool/ftp/etc/passwd		type=file mode=0644 optional
    303 ./var/spool/ftp/hidden		type=dir  mode=0111 ignore optional
    304 ./var/spool/ftp/pub		type=dir  mode=0775 ignore optional
    305 ./var/spool/mqueue		type=dir  mode=0755 ignore
    306 ./var/spool/news		type=dir  mode=0755 uname=news gname=news ignore optional
    307 ./var/spool/output		type=dir  mode=0755 ignore
    308 ./var/spool/uucp		type=dir  mode=0755 uname=uucp gname=daemon ignore optional
    309 ./var/spool/uucppublic		type=dir  mode=1777 uname=uucp gname=daemon ignore optional
    310 ./var/yp			type=dir  mode=0755
    311 ./var/yp/Makefile		type=file mode=0644 optional
    312