hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-16 07:11:05 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Suggest using /var/tmp for local domain `diagnostic' sockets,

Browse Source 
rather than making a new directory.  Also, suggest 0600
permissions (mask: 0177).

Dangers noted by: Theo de Raadt <deraadt@cvs.openbsd.org>
This commit is contained in:
Brian Somers 1997-12-31 03:58:45 +00:00
parent 5a5b9efe70
commit 32865140bc
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=32134
1 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
etc/ppp/ppp.conf.sample
View File

@ -4,7 +4,7 @@
#
# Originally written by Toshiharu OHNO
#
# $Id: ppp.conf.sample,v 1.26 1997/12/27 07:22:10 brian Exp $
# $Id: ppp.conf.sample,v 1.27 1997/12/30 23:34:35 brian Exp $
#
#################################################################
@ -116,13 +116,10 @@ examples:
#
# When in -auto, -ddial, -direct or -background mode, ppp can accept
# control instructions from the ``pppctl'' program. First, you must
# set up your control socket. It's safest to use a UNIX domain socket
# and to keep these sockets in one place:
# # mkdir /var/ppp
# # chmod 1777 /var/ppp
# then create your socket there:
# set up your control socket. It's safest to use a UNIX domain socket,
# and watch the permissions:
#
set server /var/ppp/internet 0660
set server /var/tmp/internet 0177
#
# Although a TCP port may be used if you want to allow control
# connections from other machines:
@ -314,7 +311,7 @@ loop:
set escape 0xff
set ifaddr 127.0.0.2 127.0.0.3
set openmode passive
set server /tmp/loop ""
set server /var/tmp/loop "" 0177
loop-in:
set timeout 0