Explicitly define permissions where appropriae

omniosorg · Feb 10, 2024 · 768c294 · 768c294
1 parent 1b66aa4
commit 768c294
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/build/dma/local.mog b/build/dma/local.mog
@@ -8,14 +8,15 @@
 # source. A copy of the CDDL is also available via the Internet at
 # http://www.illumos.org/license/CDDL.
 #
-# Copyright 2017 OmniOS Community Edition (OmniOSce) Association.
+# Copyright 2024 OmniOS Community Edition (OmniOSce) Association.
 
 user username=dma uid=26 group=mail gcos-field="DragonFly Mail Agent" \
     home-dir=/ password=NP
 
 <transform dir path=var/mail$ -> drop>
 <transform file path=etc/dma/ -> set preserve renamenew>
 <transform file dir path=etc/dma -> set group mail>
+<transform file path=etc/dma/auth.conf -> set mode 0640>
 <transform file path=usr/lib/smtp/dma -> set group mail>
 <transform file path=usr/lib/smtp/dma/dma -> set mode 2755>
 <transform file path=usr/lib/smtp/dma/dma-mbox-create -> set mode 4754>

diff --git a/build/sudo/local.mog b/build/sudo/local.mog
@@ -9,14 +9,16 @@
 # http://www.illumos.org/license/CDDL.
 #
 # Copyright 2011-2012 OmniTI Computer Consulting, Inc.  All rights reserved.
-# Copyright 2023 OmniOS Community Edition (OmniOSce) Association.
+# Copyright 2024 OmniOS Community Edition (OmniOSce) Association.
 #
 
 <transform path=var/db -> drop>
 
 <transform file dir path=etc/sudoers -> set group root>
 <transform file path=etc/sudoers$ -> set preserve renamenew>
 <transform file path=etc/sudo.conf -> set preserve renamenew>
+<transform file path=etc/sudoers -> set mode 0440>
+<transform dir path=etc/sudoers.d -> set mode 0750>
 
 <transform file path=usr/bin/sudo$ -> set mode 4511>
 <transform file path=usr/bin/sudoreplay$ -> set mode 0511>