BSD.root.dist revision 37 
1132720Skan#	fs: /
2132720Skan#	by: bostic
3169691Skan#
4132720Skan#	%W% (Berkeley) %G%
5132720Skan
6132720Skan# top-level files are owned by root.wheel
7132720Skan# (else too easy to get root by compromising these)
8132720Skan
9132720Skan/set owner=root group=wheel mode=0755 type=file
10132720Skan
11132720Skansys	type=link size=11 link=usr/src/sys
12132720Skana	type=dir
13132720Skan..
14132720Skanb	type=dir
15132720Skan..
16132720Skan
17132720Skandev	type=dir
18169691Skan	fd	type=dir
19132720Skan	..
20132720Skan..
21132720Skan
22132720Skanetc	type=dir
23132720Skan	disklabels	type=dir
24132720Skan	..
25132720Skan# what is the following for?
26132720Skan/set nlink=1
27132720Skan	kerberosIV	type=dir
28132720Skan	..
29132720Skan	mtree	type=dir
30169691Skan	..
31169691Skan	namedb	type=dir
32169691Skan	..
33169691Skan	passwd	mode=0644
34132720Skan	master.passwd mode=0600
35132720Skan	spwd.db	mode=0600
36132720Skan	pwd.db	mode=0644
37132720Skan	group	mode=0644
38132720Skan	crontab	mode=0644
39132720Skan	dumpdates	group=operator mode=0664
40132720Skan
41132720Skan	# config files, writeable by root
42132720Skan	/set mode=0644 type=file
43132720Skan	daily
44132720Skan	weekly
45132720Skan	monthly
46132720Skan	exports
47132720Skan	fstab
48132720Skan	hosts.equiv
49132720Skan	hosts.lpd
50132720Skan	inetd.conf
51132720Skan	printcap
52132720Skan	rc
53132720Skan	rc.local
54132720Skan	netstart	mode=0755
55132720Skan	remote
56132720Skan	security
57132720Skan	sendmail.cf
58132720Skan	sendmail.cw
59132720Skan	syslog.conf
60132720Skan	ttys
61132720Skan
62132720Skan	# prototype files, not normally written by root
63132720Skan	/set mode=0444
64132720Skan	ftpusers
65132720Skan	shells
66132720Skan	gettytab
67132720Skan	named.boot
68132720Skan	hosts
69132720Skan	networks
70132720Skan	protocols
71132720Skan	services
72132720Skan	localtime	owner=bin group=bin
73132720Skan	man.conf	owner=bin group=bin
74132720Skan
75132720Skan..
76132720Skan
77132720Skanmnt	type=dir
78132720Skan..
79132720Skanroot	type=dir
80132720Skan..
81132720Skanstand	type=dir
82132720Skan..
83132720Skantmp	type=dir owner=bin group=bin mode=01777
84132720Skan..
85132720Skanusr	type=dir
86132720Skan..
87132720Skanvar	type=dir
88132720Skan..
89132720Skan
90132720Skan# binary directories:
91132720Skan/set owner=bin group=bin mode=0755
92132720Skanbin	type=dir
93132720Skan..
94132720Skansbin	type=dir
95132720Skan..
96132720Skan