1# $NetBSD: special,v 1.47 2001/10/12 05:18:24 lukem Exp $ 2# @(#)special 8.2 (Berkeley) 1/23/94 3# 4# Hand-crafted mtree specification for the dangerous files. 5# 6# /etc/security checks: 7# - All of these are checked if $check_mtree is enabled. 8# - Files with "nomail" tags are highlighted if they change. 9# - Files without "nomail" or "exclude" tags are displayed 10# with diff(1)s if $check_changelist is enabled. 11# 12 13/set uname=root gname=wheel 14 15. type=dir mode=0755 16 17./dev type=dir mode=0755 18./dev/drum type=char mode=0640 gname=kmem 19./dev/fd type=dir mode=0755 ignore 20./dev/kmem type=char mode=0640 gname=kmem 21./dev/mem type=char mode=0640 gname=kmem 22 23./etc type=dir mode=0755 24./etc/Distfile type=file mode=0644 optional 25./etc/amd type=dir mode=0755 optional 26./etc/apm type=dir mode=0755 optional 27./etc/bootparams type=file mode=0644 optional 28./etc/bootptab type=file mode=0644 optional 29./etc/ccd.conf type=file mode=0644 optional 30./etc/crontab type=file mode=0644 optional 31./etc/csh.cshrc type=file mode=0644 32./etc/csh.login type=file mode=0644 33./etc/csh.logout type=file mode=0644 34./etc/daily type=file mode=0644 35./etc/daily.conf type=file mode=0644 36./etc/daily.local type=file mode=0644 optional 37./etc/defaultdomain type=file mode=0644 optional 38./etc/defaults type=dir mode=0755 39./etc/defaults/daily.conf type=file mode=0444 40./etc/defaults/monthly.conf type=file mode=0444 41./etc/defaults/rc.conf type=file mode=0444 42./etc/defaults/security.conf type=file mode=0444 43./etc/defaults/weekly.conf type=file mode=0444 44./etc/dhclient-enter-hooks type=file mode=0644 optional 45./etc/dhclient-exit-hooks type=file mode=0644 optional 46./etc/dhclient.conf type=file mode=0644 optional 47./etc/dhcpd.conf type=file mode=0644 optional 48./etc/disktab type=file mode=0644 49./etc/dm.conf type=file mode=0644 50./etc/dumpdates type=file mode=0664 gname=operator optional 51./etc/ethers type=file mode=0644 optional 52./etc/exports type=file mode=0644 optional 53./etc/floppytab type=file mode=0644 54./etc/fstab type=file mode=0644 55./etc/ftpchroot type=file mode=0644 56./etc/ftpd.conf type=file mode=0644 optional 57./etc/ftpusers type=file mode=0644 58./etc/ftpwelcome type=file mode=0644 optional 59./etc/gateways type=file mode=0644 optional 60./etc/gettytab type=file mode=0644 61./etc/group type=file mode=0644 62./etc/hesiod.conf type=file mode=0644 optional 63./etc/hosts type=file mode=0644 64./etc/hosts.allow type=file mode=0644 optional 65./etc/hosts.deny type=file mode=0644 optional 66./etc/hosts.equiv type=file mode=0600 optional 67./etc/hosts.lpd type=file mode=0644 optional 68./etc/ifaliases type=file mode=0644 optional 69./etc/inetd.conf type=file mode=0644 70./etc/ipf.conf type=file mode=0644 optional 71./etc/ipnat.conf type=file mode=0644 optional 72./etc/ipsec.conf type=file mode=0644 optional 73./etc/kerberosIV type=dir mode=0755 ignore optional 74./etc/ld.so.conf type=file mode=0644 optional 75./etc/lkm.conf type=file mode=0644 optional 76./etc/localtime type=link mode=0755 77./etc/login.conf type=file mode=0644 optional 78./etc/mail type=dir mode=0755 79./etc/mail/aliases type=file mode=0644 80./etc/mail/aliases.db type=file mode=0644 tags=exclude 81./etc/mail/helpfile type=file mode=0444 82./etc/mail/local-host-names type=file mode=0644 optional 83./etc/mail/sendmail.cf type=file mode=0444 84./etc/mail.rc type=file mode=0644 85./etc/mailer.conf type=file mode=0644 86./etc/man.conf type=file mode=0644 87./etc/master.passwd type=file mode=0600 tags=nomail 88./etc/mk.conf type=file mode=0644 89./etc/moduli type=file mode=0444 90./etc/monthly type=file mode=0644 91./etc/monthly.conf type=file mode=0644 92./etc/monthly.local type=file mode=0644 optional 93./etc/mrouted.conf type=file mode=0644 94./etc/mtree type=dir mode=0755 95./etc/mtree/special type=file mode=0444 96./etc/mtree/special.local type=file mode=0644 optional 97./etc/mygate type=file mode=0644 optional 98./etc/myname type=file mode=0644 optional 99./etc/named.conf type=file mode=0644 optional 100./etc/namedb type=dir mode=0755 101./etc/netconfig type=file mode=0644 102./etc/netgroup type=file mode=0644 optional 103./etc/netgroup.db type=file mode=0644 optional tags=exclude 104./etc/netstart.local type=file mode=0644 optional 105./etc/networks type=file mode=0644 106./etc/newsyslog.conf type=file mode=0644 107./etc/nsswitch.conf type=file mode=0644 108./etc/ntp.conf type=file mode=0644 optional 109./etc/passwd type=file mode=0644 110./etc/passwd.conf type=file mode=0644 optional 111./etc/phones type=file mode=0644 112./etc/ppp type=dir mode=0755 optional 113./etc/ppp/options type=file mode=0644 optional 114./etc/printcap type=file mode=0644 115./etc/profile type=file mode=0644 116./etc/protocols type=file mode=0644 117./etc/rbootd.conf type=file mode=0644 optional 118./etc/rc type=file mode=0644 119./etc/rc.conf type=file mode=0644 120./etc/rc.d type=dir mode=0755 121./etc/rc.d/DAEMON type=file mode=0555 122./etc/rc.d/LOGIN type=file mode=0555 123./etc/rc.d/NETWORK type=file mode=0555 124./etc/rc.d/SERVERS type=file mode=0555 125./etc/rc.d/accounting type=file mode=0555 126./etc/rc.d/altqd type=file mode=0555 127./etc/rc.d/amd type=file mode=0555 128./etc/rc.d/apmd type=file mode=0555 129./etc/rc.d/bootconf.sh type=file mode=0555 130./etc/rc.d/bootparams type=file mode=0555 131./etc/rc.d/ccd type=file mode=0555 132./etc/rc.d/cleartmp type=file mode=0555 133./etc/rc.d/cron type=file mode=0555 134./etc/rc.d/dhclient type=file mode=0555 135./etc/rc.d/dhcpd type=file mode=0555 136./etc/rc.d/dhcrelay type=file mode=0555 137./etc/rc.d/dmesg type=file mode=0555 138./etc/rc.d/downinterfaces type=file mode=0555 139./etc/rc.d/fsck type=file mode=0555 140./etc/rc.d/inetd type=file mode=0555 141./etc/rc.d/ipfilter type=file mode=0555 142./etc/rc.d/ipmon type=file mode=0555 143./etc/rc.d/ipnat type=file mode=0555 144./etc/rc.d/ipsec type=file mode=0555 145./etc/rc.d/isdnd type=file mode=0555 146./etc/rc.d/kdc type=file mode=0555 147./etc/rc.d/ldconfig type=file mode=0555 148./etc/rc.d/lkm1 type=file mode=0555 149./etc/rc.d/lkm2 type=file mode=0555 150./etc/rc.d/lkm3 type=file mode=0555 151./etc/rc.d/local type=file mode=0555 152./etc/rc.d/lpd type=file mode=0555 153./etc/rc.d/mopd type=file mode=0555 154./etc/rc.d/motd type=file mode=0555 155./etc/rc.d/mountall type=file mode=0555 156./etc/rc.d/mountcritlocal type=file mode=0555 157./etc/rc.d/mountcritremote type=file mode=0555 158./etc/rc.d/mountd type=file mode=0555 159./etc/rc.d/mrouted type=file mode=0555 160./etc/rc.d/named type=file mode=0555 161./etc/rc.d/ndbootd type=file mode=0555 162./etc/rc.d/network type=file mode=0555 163./etc/rc.d/newsyslog type=file mode=0555 164./etc/rc.d/nfsd type=file mode=0555 165./etc/rc.d/nfslocking type=file mode=0555 166./etc/rc.d/ntpd type=file mode=0555 167./etc/rc.d/ntpdate type=file mode=0555 168./etc/rc.d/poffd type=file mode=0555 169./etc/rc.d/postfix type=file mode=0555 170./etc/rc.d/ppp type=file mode=0555 171./etc/rc.d/pwcheck type=file mode=0555 172./etc/rc.d/quota type=file mode=0555 173./etc/rc.d/racoon type=file mode=0555 174./etc/rc.d/raidframe type=file mode=0555 175./etc/rc.d/rarpd type=file mode=0555 176./etc/rc.d/rbootd type=file mode=0555 177./etc/rc.d/root type=file mode=0555 178./etc/rc.d/route6d type=file mode=0555 179./etc/rc.d/routed type=file mode=0555 180./etc/rc.d/rpcbind type=file mode=0555 181./etc/rc.d/rtadvd type=file mode=0555 182./etc/rc.d/rtsold type=file mode=0555 183./etc/rc.d/rwho type=file mode=0555 184./etc/rc.d/savecore type=file mode=0555 185./etc/rc.d/screenblank type=file mode=0555 186./etc/rc.d/securelevel type=file mode=0555 187./etc/rc.d/sendmail type=file mode=0555 188./etc/rc.d/sshd type=file mode=0555 189./etc/rc.d/swap1 type=file mode=0555 190./etc/rc.d/swap2 type=file mode=0555 191./etc/rc.d/sysctl type=file mode=0555 192./etc/rc.d/sysdb type=file mode=0555 193./etc/rc.d/syslogd type=file mode=0555 194./etc/rc.d/timed type=file mode=0555 195./etc/rc.d/ttys type=file mode=0555 196./etc/rc.d/virecover type=file mode=0555 197./etc/rc.d/wscons type=file mode=0555 198./etc/rc.d/xdm type=file mode=0555 199./etc/rc.d/xfs type=file mode=0555 200./etc/rc.d/ypbind type=file mode=0555 201./etc/rc.d/yppasswdd type=file mode=0555 202./etc/rc.d/ypserv type=file mode=0555 203./etc/rc.lkm type=file mode=0644 204./etc/rc.local type=file mode=0644 optional 205./etc/rc.shutdown type=file mode=0644 206./etc/rc.shutdown.local type=file mode=0644 optional 207./etc/rc.subr type=file mode=0644 208./etc/remote type=file mode=0644 209./etc/resolv.conf type=file mode=0644 optional 210./etc/rpc type=file mode=0644 211./etc/rtadvd.conf type=file mode=0644 optional 212./etc/security type=file mode=0644 213./etc/security.conf type=file mode=0644 214./etc/security.local type=file mode=0644 optional 215./etc/services type=file mode=0644 216./etc/shells type=file mode=0644 217./etc/shosts.equiv type=file mode=0600 optional 218./etc/spwd.db type=file mode=0600 tags=exclude 219./etc/ssh.conf type=file mode=0644 optional 220./etc/ssh_host_dsa_key type=file mode=0600 optional tags=nomail 221./etc/ssh_host_dsa_key.pub type=file mode=0644 optional 222./etc/ssh_host_key type=file mode=0600 optional tags=nomail 223./etc/ssh_host_key.pub type=file mode=0644 optional 224./etc/ssh_host_rsa_key type=file mode=0600 optional tags=nomail 225./etc/ssh_host_rsa_key.pub type=file mode=0644 optional 226./etc/ssh_known_hosts type=file mode=0644 optional 227./etc/ssh_known_hosts2 type=file mode=0644 optional 228./etc/sshd.conf type=file mode=0644 optional 229./etc/sysctl.conf type=file mode=0644 230./etc/syslog.conf type=file mode=0644 231./etc/ttyaction type=file mode=0644 optional 232./etc/ttys type=file mode=0644 233./etc/usermgmt.conf type=file mode=0644 optional 234./etc/weekly type=file mode=0644 235./etc/weekly.conf type=file mode=0644 236./etc/weekly.local type=file mode=0644 optional 237./etc/wscons.conf type=file mode=0644 238 239./root type=dir mode=0755 240./root/.cshrc type=file mode=0644 241./root/.klogin type=file mode=0600 optional 242./root/.login type=file mode=0644 243./root/.profile type=file mode=0644 244./root/.rhosts type=file mode=0600 optional 245./root/.shosts type=file mode=0600 optional 246./root/.ssh type=dir mode=0700 optional 247./root/.ssh/authorized_keys type=file mode=0600 optional 248./root/.ssh/authorized_keys2 type=file mode=0600 optional 249./root/.ssh/config type=file mode=0644 optional 250./root/.ssh/id_dsa type=file mode=0600 optional tags=nomail 251./root/.ssh/id_dsa.pub type=file mode=0644 optional 252./root/.ssh/id_rsa type=file mode=0600 optional tags=nomail 253./root/.ssh/id_rsa.pub type=file mode=0644 optional 254./root/.ssh/identity type=file mode=0600 optional tags=nomail 255./root/.ssh/identity.pub type=file mode=0644 optional 256./root/.ssh/known_hosts type=file mode=0644 optional 257./root/.ssh/known_hosts2 type=file mode=0644 optional 258 259./sbin type=dir mode=0755 ignore 260 261./usr type=dir mode=0755 262./usr/bin type=dir mode=0755 ignore 263./usr/games type=dir mode=0755 optional 264./usr/games/hide type=dir mode=0750 gname=games ignore optional 265./usr/include type=dir mode=0755 ignore 266./usr/lib type=dir mode=0755 ignore 267./usr/libdata type=dir mode=0755 ignore 268./usr/libexec type=dir mode=0755 ignore 269./usr/local type=dir mode=0755 270./usr/local/bin type=dir mode=0755 ignore 271./usr/local/lib type=dir mode=0755 ignore 272./usr/pkg type=dir mode=0755 ignore optional 273./usr/sbin type=dir mode=0755 ignore 274./usr/share type=dir mode=0755 ignore 275 276./var type=dir mode=0755 277./var/account type=dir mode=0755 278./var/account/acct type=file mode=0644 optional tags=exclude 279./var/at type=dir mode=0755 ignore 280./var/backups type=dir mode=0755 ignore 281./var/cron type=dir mode=0755 282./var/cron/tabs type=dir mode=0700 283./var/cron/tabs/root type=file mode=0600 284./var/db type=dir mode=0755 285./var/db/kvm.db type=file mode=0644 tags=exclude 286./var/log type=dir mode=0755 287./var/log/authlog type=file mode=0600 optional tags=exclude 288./var/log/wtmp type=file mode=0644 tags=exclude 289./var/mail type=dir mode=1777 ignore 290./var/preserve type=dir mode=0755 ignore 291./var/run type=dir mode=0755 292./var/run/utmp type=file mode=0664 gname=utmp tags=exclude 293./var/spool type=dir mode=0755 294./var/spool/ftp type=dir mode=0755 optional 295./var/spool/ftp/bin type=dir mode=0755 optional 296./var/spool/ftp/bin/ls type=file mode=0555 optional 297./var/spool/ftp/etc type=dir mode=0755 optional 298./var/spool/ftp/etc/group type=file mode=0644 optional 299./var/spool/ftp/etc/localtime type=file mode=0644 optional 300./var/spool/ftp/etc/master.passwd type=file mode=0600 optional 301./var/spool/ftp/etc/passwd type=file mode=0644 optional 302./var/spool/ftp/hidden type=dir mode=0111 ignore optional 303./var/spool/ftp/pub type=dir mode=0775 ignore optional 304./var/spool/mqueue type=dir mode=0755 ignore 305./var/spool/news type=dir mode=0755 uname=news gname=news ignore optional 306./var/spool/output type=dir mode=0755 ignore 307./var/spool/uucp type=dir mode=0755 uname=uucp gname=daemon ignore optional 308./var/spool/uucppublic type=dir mode=1777 uname=uucp gname=daemon ignore optional 309./var/yp type=dir mode=0755 310./var/yp/Makefile type=file mode=0644 optional 311