mtree/special needs a change for dhclient-script hooks

   I have an /etc/dhclient-exit-hooks on one of my hosts,
and I am  
getting output from /etc/security runs complaining about the
 
permissions.  It's currently mode 0555.  I see that
/etc/mtree/ 
special lists that it (and dhclient-enter-hooks) should be
0644 (or  
less?).  This is an error, I think.

   The man page for dhclient-script(8) notes that these
files must be  
executable to be used.  Therefore, I think the
etc/mtree/special file  
should be changed to indicate that this is allowed, if not
required.

   Let me know if I've gotten something wrong, but...

                                - Chris

On Mon, Jun 11, 2007 at 09:08:44AM -0400, Chris Ross wrote:
  |   I have an /etc/dhclient-exit-hooks on one of my hosts,
and I am  
  | getting output from /etc/security runs complaining about
the  
  | permissions.  It's currently mode 0555.  I see that
/etc/mtree/ 
  | special lists that it (and dhclient-enter-hooks) should
be 0644 (or  
  | less?).  This is an error, I think.
  | 
  |   The man page for dhclient-script(8) notes that these
files must be  
  | executable to be used.  Therefore, I think the
etc/mtree/special file  
  | should be changed to indicate that this is allowed, if
not required.
  | 
  |   Let me know if I've gotten something wrong, but...


The implementation of /sbin/dhclient-script just detects
the
presence of the hook files using test -f, rather than
testing
for executable status with test -x, so installing the hooks
as 0644 should be sufficient.

I think that the documentation for dhclient-script(8) is a
bit unclear.
Have you asked on dhcp-clientisc.org for a definitive
answer?

cheers,
Luke.