src/etc/mtree/special - view

Return to special CVS log

Up to [local] / src / etc / mtree

File: [local] / src / etc / mtree / special (download)

Revision 1.129, Tue Sep 19 15:02:55 2023 UTC (8 months, 1 week ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, HEAD
Changes since 1.128: +1 -3 lines

etc: drop vestiges of obsolete DSA ssh host keys

It has been 8 years since DSA keys were disabled by default for
ssh/sshd, and 15 months since ssh-keygen -A belatedly stopped
generating DSA host keys.

ok semarie@ deraadt@

#	$OpenBSD: special,v 1.129 2023/09/19 15:02:55 naddy Exp $
#
# Hand-crafted mtree specification for the dangerous files.
#

.		type=dir mode=0755 uname=root gname=wheel

dev		type=dir mode=0755 uname=root gname=wheel
fd		type=dir mode=0555 uname=root gname=wheel ignore
..	#dev/fd
kmem		type=char mode=0640 uname=root gname=kmem
mem		type=char mode=0640 uname=root gname=kmem
..	#dev

etc		type=dir mode=0755 uname=root gname=wheel
acme-client.conf	type=file mode=0644 uname=root gname=wheel optional
bgpd.conf	type=file mode=0600 uname=root gname=wheel optional
chio.conf	type=file mode=0644 uname=root gname=operator optional
crontab		type=file mode=0600 uname=root gname=wheel optional
csh.cshrc	type=file mode=0644 uname=root gname=wheel optional
csh.login	type=file mode=0644 uname=root gname=wheel optional
csh.logout	type=file mode=0644 uname=root gname=wheel optional
daily		type=file mode=0644 uname=root gname=wheel
daily.local	type=file mode=0644 uname=root gname=wheel optional
dhcpd.conf	type=file mode=0644 uname=root gname=wheel optional
dvmrpd.conf	type=file mode=0600 uname=root gname=wheel optional
exports		type=file mode=0644 uname=root gname=wheel optional
fbtab		type=file mode=0644 uname=root gname=wheel
fstab		type=file mode=0644 uname=root gname=wheel
ftpchroot	type=file mode=0644 uname=root gname=wheel optional
ftpusers	type=file mode=0644 uname=root gname=wheel
group		type=file mode=0644 uname=root gname=wheel
hostapd.conf	type=file mode=0600 uname=root gname=wheel optional
hosts		type=file mode=0644 uname=root gname=wheel
httpd.conf	type=file mode=0644 uname=root gname=wheel optional
ifstated.conf	type=file mode=0644 uname=root gname=wheel optional
iked		type=dir mode=0755 uname=root gname=wheel
..	#iked
iked.conf	type=file mode=0600 uname=root gname=wheel optional
inetd.conf	type=file mode=0644 uname=root gname=wheel optional
ipsec.conf	type=file mode=0600 uname=root gname=wheel optional
isakmpd		type=dir mode=0755 uname=root gname=wheel
isakmpd.conf	type=file mode=0600 uname=root gname=wheel optional
isakmpd.policy	type=file mode=0600 uname=root gname=wheel optional
..	#isakmpd
ldapd.conf	type=file mode=0600 uname=root gname=wheel optional
ldpd.conf	type=file mode=0600 uname=root gname=wheel optional
login.conf	type=file mode=0644 uname=root gname=wheel
login.conf.d	type=dir mode=0755 uname=root gname=wheel
..	#login.conf.d
login_ldap.conf	type=file mode=0640 uname=root gname=auth optional
mail.rc		type=file mode=0644 uname=root gname=wheel
mailer.conf	type=file mode=0644 uname=root gname=wheel
master.passwd	type=file mode=0600 uname=root gname=wheel
monthly		type=file mode=0644 uname=root gname=wheel
monthly.local	type=file mode=0644 uname=root gname=wheel optional
mrouted.conf	type=file mode=0644 uname=root gname=wheel optional
mail		type=dir mode=0755 uname=root gname=wheel
aliases		type=file mode=0644 uname=root gname=wheel optional
aliases.db	type=file mode=0644 uname=root gname=wheel optional
secrets		type=file mode=0640 uname=root gname=_smtpd optional
secrets.db	type=file mode=0640 uname=root gname=_smtpd optional
smtpd.conf	type=file mode=0644 uname=root gname=wheel
spamd.conf	type=file mode=0644 uname=root gname=wheel optional
..	#mail
mtree		type=dir mode=0755 uname=root gname=wheel
special		type=file mode=0600 uname=root gname=wheel
..	#mtree
moduli		type=file mode=0644 uname=root gname=wheel
netstart	type=file mode=0644 uname=root gname=wheel
npppd		type=dir mode=0755 uname=root gname=wheel
npppd.conf	type=file mode=0600 uname=root gname=wheel
npppd-users	type=file mode=0600 uname=root gname=wheel
..	#npppd
ntpd.conf	type=file mode=0644 uname=root gname=wheel optional
ospfd.conf	type=file mode=0600 uname=root gname=wheel optional
ospf6d.conf	type=file mode=0600 uname=root gname=wheel optional
passwd		type=file mode=0644 uname=root gname=wheel
pf.conf		type=file mode=0600 uname=root gname=wheel optional
printcap	mode=0644 uname=root gname=wheel optional
radiusd.conf	type=file mode=0600 uname=root gname=wheel optional
rc		type=file mode=0644 uname=root gname=wheel
rc.conf		type=file mode=0644 uname=root gname=wheel
rc.conf.local	type=file mode=0644 uname=root gname=wheel optional
rc.local	type=file mode=0644 uname=root gname=wheel optional
rc.securelevel	type=file mode=0644 uname=root gname=wheel optional
rc.shutdown	type=file mode=0644 uname=root gname=wheel optional
relayd.conf	type=file mode=0600 uname=root gname=wheel optional
remote		type=file mode=0644 uname=root gname=wheel optional
resolv.conf	type=file mode=0644 uname=root gname=wheel optional
resolv.conf.tail type=file mode=0644 uname=root gname=wheel optional
rbootd.conf	type=file mode=0644 uname=root gname=wheel optional
ripd.conf	type=file mode=0600 uname=root gname=wheel optional
sasyncd.conf	type=file mode=0600 uname=root gname=wheel optional
sensorsd.conf	type=file mode=0644 uname=root gname=wheel optional
shells		type=file mode=0644 uname=root gname=wheel
skey		type=dir mode=01730 uname=root gname=auth optional
..	#skey
snmpd.conf	type=file mode=0600 uname=root gname=wheel optional
soii.key	type=file mode=0600 uname=root gname=wheel optional
spwd.db		type=file mode=0640 uname=root gname=_shadow
ssh		type=dir mode=0755 uname=root gname=wheel optional
ssh_config	type=file mode=0644 uname=root gname=wheel
ssh_host_ecdsa_key	type=file mode=0600 uname=root gname=wheel optional
ssh_host_ecdsa_key.pub	type=file mode=0644 uname=root gname=wheel optional
ssh_host_ed25519_key	type=file mode=0600 uname=root gname=wheel optional
ssh_host_ed25519_key.pub	type=file mode=0644 uname=root gname=wheel optional
ssh_host_key	type=file mode=0600 uname=root gname=wheel optional
ssh_host_key.pub	type=file mode=0644 uname=root gname=wheel optional
ssh_host_rsa_key	type=file mode=0600 uname=root gname=wheel optional
ssh_host_rsa_key.pub	type=file mode=0644 uname=root gname=wheel optional
sshd_config	type=file mode=0644 uname=root gname=wheel
..	#ssh
syslog.conf	type=file mode=0644 uname=root gname=wheel
ttys		type=file mode=0644 uname=root gname=wheel
vm.conf		type=file mode=0644 uname=root gname=wheel optional
weekly		type=file mode=0644 uname=root gname=wheel
weekly.local	type=file mode=0644 uname=root gname=wheel optional
ypldap.conf	type=file mode=0600 uname=root gname=wheel optional
..	#etc

root		type=dir mode=0700 uname=root gname=wheel
.cshrc		type=file mode=0644 uname=root gname=wheel
.login		type=file mode=0644 uname=root gname=wheel
.profile	type=file mode=0644 uname=root gname=wheel
.rhosts		type=file mode=0600 uname=root gname=wheel optional
.ssh		type=dir mode=0700 uname=root gname=wheel
authorized_keys	type=file mode=0600 uname=root gname=wheel
..	#root/.ssh
..	#root

sbin		type=dir mode=0755 uname=root gname=wheel ignore
..	#sbin

usr		type=dir mode=0755 uname=root gname=wheel
bin		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/bin
games		type=dir mode=0755 uname=root gname=wheel optional
..	#usr/games
include		type=dir mode=0755 uname=root gname=bin ignore
..	#usr/include
lib		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/lib
libdata		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/libdata
libexec		type=dir mode=0755 uname=root gname=wheel
auth		type=dir mode=0750 uname=root gname=auth ignore
..	#usr/libexec/auth
..	#usr/libexec
local		type=dir mode=0755 uname=root gname=wheel
bin		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/local/bin
lib		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/local/lib
..	#usr/local
sbin		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/sbin
share		type=dir mode=0755 uname=root gname=wheel ignore
..	#usr/share
..	#usr

var		type=dir mode=0755 uname=root gname=wheel
account		type=dir mode=0755 uname=root gname=wheel
acct		type=file mode=0644 uname=root gname=wheel optional
..	#var/account
yp		type=dir mode=0755 uname=root gname=wheel optional ignore
..	#var/yp
backups		type=dir mode=0700 uname=root gname=wheel ignore
..	#var/backups
cron		type=dir mode=0555 uname=root gname=wheel
log		type=file mode=0600 uname=root gname=wheel
atjobs		type=dir mode=01770 uname=root gname=crontab ignore
..	#var/cron/atjobs
tabs		type=dir mode=01730 uname=root gname=crontab ignore
..	#var/cron/tabs
..	#var/cron
db		type=dir mode=0755 uname=root gname=wheel
host.random	type=file mode=0600 uname=root gname=wheel optional
kvm_bsd.db	type=file mode=0640 uname=root gname=kmem
..	#var/db
log		type=dir mode=0755 uname=root gname=wheel
authlog		type=file mode=0640 uname=root gname=wheel
secure		type=file mode=0600 uname=root gname=wheel
wtmp		type=file mode=0644 uname=root gname=wheel
lastlog		type=file mode=0644 uname=root gname=wheel
..	#var/log
mail		type=dir mode=0755 uname=root gname=wheel ignore
..	#var/mail
nsd		type=dir mode=0755 uname=root gname=wheel
etc		type=dir mode=0750 uname=root gname=_nsd
..	#var/nsd/etc
..	#var/nsd
run		type=dir mode=0755 uname=root gname=wheel
utmp		type=file mode=0664 uname=root gname=utmp
..	#var/run
spool		type=dir mode=0755 uname=root gname=wheel
ftp		type=dir mode=0555 uname=root gname=wheel optional
bin		type=dir mode=0511 uname=root gname=wheel optional
..	#var/spool/ftp/bin
etc		type=dir mode=0511 uname=root gname=wheel optional
group		type=file mode=0444 uname=root gname=wheel optional
localtime	type=file mode=0444 uname=root gname=wheel optional
master.passwd	type=file mode=0400 uname=root gname=wheel optional
spwd.db		type=file mode=0400 uname=root gname=wheel optional
motd		type=file mode=0444 uname=root gname=wheel optional
passwd		type=file mode=0444 uname=root gname=wheel optional
pwd.db		type=file mode=0444 uname=root gname=wheel optional
..	#var/spool/ftp/etc
hidden		type=dir mode=0111 uname=root gname=wheel optional ignore
..	#var/spool/ftp/hidden
pub		type=dir mode=0555 uname=root gname=wheel optional ignore
..	#var/spool/ftp/pub
..	#var/spool/ftp
output		type=dir mode=0755 uname=root gname=wheel ignore
..	#var/spool/output
..	#var/spool