Comment 0 for bug 1859422

Revision history for this message
James Page (james-page) wrote :

Package should security directories and files as below:

  chown <pkg>:adm /var/log/<pkg>
  chmod 0750 /var/log/<pkg>

  find /etc/<pkg> -exec echo chown root:<pkg> "{}" +
  find /etc/<pkg> -type f -exec echo chmod 0640 "{}" + -o -type d -exec echo chmod 0750 "{}" +

  chown <pkg>:<pkg> /var/lib/<pkg>
  chown 0750 /var/lib/<pkg>

Users should be created with "--shell /usr/sbin/nologin" rather than /bin/false