diff options
| author | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2012-07-08 21:48:39 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2012-07-08 21:48:39 +0000 |
| commit | 8d22bf05228451a53662d33609c73233c55aa864 (patch) | |
| tree | b73986f32dcf68d7324866501ced68e2a47a9380 /share/man/man8 | |
| parent | 1b8aba4e91ff8f0438c64b25cb57bbedb054930c (diff) | |
To detect changes of system files, use SHA-256 rather than MD5,
taking advantage of naddy@'s recent mtree(8) modernization.
While here, do not provide an example protecting a home directory
from file changes; protect some system binaries instead.
ok naddy@ jmc@
Diffstat (limited to 'share/man/man8')
| -rw-r--r-- | share/man/man8/security.8 | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/share/man/man8/security.8 b/share/man/man8/security.8 index bc69b39fac1..0c44815a118 100644 --- a/share/man/man8/security.8 +++ b/share/man/man8/security.8 @@ -1,8 +1,8 @@ -.\" $OpenBSD: security.8,v 1.20 2011/04/19 05:17:24 jmc Exp $ +.\" $OpenBSD: security.8,v 1.21 2012/07/08 21:48:38 schwarze Exp $ .\" .\" David Leonard, 2001. Public Domain. .\" -.Dd $Mdocdate: April 19 2011 $ +.Dd $Mdocdate: July 8 2012 $ .Dt SECURITY 8 .Os .Sh NAME @@ -79,12 +79,12 @@ These lists should be kept in and filenames must have the suffix .Dq .secure . The following example shows how to create such a list, -to protect the home directory of user -.Dq bob : +to protect the programs in +.Pa /bin : .Bd -literal -offset 4n -# mtree -cx -p /home/bob -K md5digest,type \*(Gt/etc/mtree/bob.secure -# chown root:wheel /etc/mtree/bob.secure -# chmod 600 /etc/mtree/bob.secure +# mtree -cx -p /bin -K sha256digest,type > /etc/mtree/bin.secure +# chown root:wheel /etc/mtree/bin.secure +# chmod 600 /etc/mtree/bin.secure .Ed .Pp .Sy Note: |