From d7b051f0be33e6fae37231c65183261fd6bf0b97 Mon Sep 17 00:00:00 2001
From: Russ Allbery
Date: Mon, 19 Jul 2010 09:48:13 -0700
Subject: [PATCH] Specify ownership and permission for control information
files
---
policy.sgml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/policy.sgml b/policy.sgml
index c0415c1..9aca16c 100644
--- a/policy.sgml
+++ b/policy.sgml
@@ -8014,6 +8014,12 @@ endscript
+
+ Control information files should be owned by root:root
+ and either mode 644 (for most files) or mode 755 (for
+ executables such as maintainer
+ scripts).
+
Setuid and setgid executables should be mode 4755 or 2755
--
2.39.5