Arch Linux

hoschi

Member

From: Ulm (Germany)

Registered: 2008-11-03

Posts: 474

File permissions for /etc/shadow and /etc/gshadow differ from package

Hello!

During the last update of the package filesystem I stumpled across missing read&write permissions for the root user on the files shadow and gshadow. I discovered this on my private laptop and on my desktop at work:

[current values]

-rw-r--r-- 1 root root  898 Mar  2 09:35 group
---------- 1 root root  747 Mar  2 09:21 gshadow
-rw-r--r-- 1 root root 1347 Aug 27  2014 passwd
---------- 1 root root  978 Nov 24 09:06 shadow

[package values]

-rw-r--r-- 1 root root 618 Oct 25 20:41 group
-rw------- 1 root root 509 Oct 25 20:41 gshadow
-rw-r--r-- 1 root root 688 Oct 25 20:41 passwd
-rw------- 1 root root 334 Oct 25 20:41 shadow

Pacman doesn't warn about the different permissions between filesystem and package values. This behaviour should be correct, because the files are generally modified and therefore installed as *.pacnew. Furthermore I've seen in the PKGBUILD, that the permissions are also set during installation ("install" is a command from coreutils). So I will modify the permission according the package values and what PKDBUILD itself does:

chmod 600 gshadow shadow

Any idea what caused this?

Thanks

PS: I'm sorry, this was also discoverd in the newbie area.

Last edited by hoschi (2015-03-02 16:54:07)