1# $NetBSD: special,v 1.152 2015/03/21 19:10:43 jmcneill Exp $ 2# @(#)special 8.2 (Berkeley) 1/23/94 3# 4# This file may be overwritten on upgrades. 5# Put your custom specifications in /etc/mtree/special.local instead. 6# See security.conf(5) for details. 7 8# 9# /etc/security checks: 10# - All of these are checked if $check_mtree is enabled. 11# - Files with "nodiff" tags are highlighted if they change. 12# - Files without "nodiff" or "exclude" tags are displayed 13# with diff(1)s if $check_changelist is enabled. 14# 15 16/set uname=root gname=wheel 17 18. type=dir mode=0755 19 20./boot.cfg type=file mode=0644 optional 21 22./dev type=dir mode=0755 23./dev/drum type=char mode=0640 gname=kmem 24./dev/fd type=dir mode=0755 ignore 25./dev/kmem type=char mode=0640 gname=kmem 26./dev/mem type=char mode=0640 gname=kmem 27 28./etc type=dir mode=0755 29./etc/Distfile type=file mode=0644 optional 30./etc/amd type=dir mode=0755 optional 31./etc/apm type=dir mode=0755 optional 32./etc/bluetooth type=dir mode=0755 33./etc/bluetooth/btattach.conf type=file mode=0644 34./etc/bluetooth/btdevctl.conf type=file mode=0644 35./etc/bluetooth/hosts type=file mode=0644 36./etc/bluetooth/protocols type=file mode=0644 37./etc/bootparams type=file mode=0644 optional 38./etc/bootptab type=file mode=0644 optional 39./etc/ccd.conf type=file mode=0644 optional 40./etc/cgd type=dir mode=0700 optional 41./etc/cgd/cgd.conf type=file mode=0600 optional tags=nodiff 42./etc/changelist type=file mode=0644 43./etc/crontab type=file mode=0644 optional 44./etc/csh.cshrc type=file mode=0644 45./etc/csh.login type=file mode=0644 46./etc/csh.logout type=file mode=0644 47./etc/daily type=file mode=0644 48./etc/daily.conf type=file mode=0644 49./etc/daily.local type=file mode=0644 optional 50./etc/defaultdomain type=file mode=0644 optional 51./etc/defaults type=dir mode=0755 52./etc/defaults/daily.conf type=file mode=0444 53./etc/defaults/monthly.conf type=file mode=0444 54./etc/defaults/rc.conf type=file mode=0444 55./etc/defaults/security.conf type=file mode=0444 56./etc/defaults/weekly.conf type=file mode=0444 57./etc/dhclient-enter-hooks type=file mode=0644 optional 58./etc/dhclient-exit-hooks type=file mode=0644 optional 59./etc/dhclient.conf type=file mode=0644 optional 60./etc/dhcpcd.conf type=file mode=0644 61./etc/dhcpcd.duid type=file mode=0644 optional 62./etc/dhcpcd.hook type=file mode=0644 optional 63./etc/dhcpd.conf type=file mode=0644 optional 64./etc/disktab type=file mode=0644 65./etc/dm.conf type=file mode=0644 66./etc/dumpdates type=file mode=0664 gname=operator optional tags=exclude 67./etc/envsys.conf type=file mode=0644 optional 68./etc/ethers type=file mode=0644 optional 69./etc/exports type=file mode=0644 optional 70./etc/floppytab type=file mode=0644 71./etc/fstab type=file mode=0644 72./etc/ftpchroot type=file mode=0644 73./etc/ftpd.conf type=file mode=0644 optional 74./etc/ftpusers type=file mode=0644 75./etc/ftpwelcome type=file mode=0644 optional 76./etc/gateways type=file mode=0644 optional 77./etc/gettytab type=file mode=0644 78./etc/gpio.conf type=file mode=0644 79./etc/group type=file mode=0644 80./etc/hesiod.conf type=file mode=0644 optional 81./etc/hosts type=file mode=0644 82./etc/hosts.allow type=file mode=0644 optional 83./etc/hosts.deny type=file mode=0644 optional 84./etc/hosts.equiv type=file mode=0600 optional tags=nodiff 85./etc/hosts.lpd type=file mode=0644 optional 86./etc/ifaliases type=file mode=0644 optional 87./etc/inetd.conf type=file mode=0644 88./etc/ipf.conf type=file mode=0644 optional 89./etc/ipf6.conf type=file mode=0644 optional 90./etc/ipnat.conf type=file mode=0644 optional 91./etc/ipsec.conf type=file mode=0600 optional tags=nodiff 92./etc/iscsi type=dir mode=0755 93./etc/iscsi/auths type=file mode=0600 tags=nodiff 94./etc/iscsi/targets type=file mode=0644 95./etc/ld.so.conf type=file mode=0644 optional 96./etc/localtime type=link mode=0755 97./etc/locate.conf type=file mode=0644 optional 98./etc/login.conf type=file mode=0644 optional 99./etc/mail type=dir mode=0755 100./etc/mail/aliases type=file mode=0644 101./etc/mail/aliases.db type=file mode=0644 optional tags=exclude 102./etc/mail.rc type=file mode=0644 103./etc/mailer.conf type=file mode=0644 104./etc/man.conf type=file mode=0644 105./etc/master.passwd type=file mode=0600 tags=nodiff 106./etc/mk.conf type=file mode=0644 optional 107./etc/moduli type=file mode=0444 108./etc/monthly type=file mode=0644 109./etc/monthly.conf type=file mode=0644 110./etc/monthly.local type=file mode=0644 optional 111./etc/mrouted.conf type=file mode=0644 112./etc/mtree type=dir mode=0755 113./etc/mtree/special type=file mode=0444 114./etc/mtree/special.local type=file mode=0644 optional 115./etc/mygate type=file mode=0644 optional 116./etc/mygate6 type=file mode=0644 optional 117./etc/myname type=file mode=0644 optional 118./etc/named.conf type=file mode=0644 optional 119./etc/namedb type=dir mode=0755 120./etc/netconfig type=file mode=0644 121./etc/netgroup type=file mode=0644 optional 122./etc/netstart.local type=file mode=0644 optional 123./etc/networks type=file mode=0644 124./etc/newsyslog.conf type=file mode=0644 125./etc/nsswitch.conf type=file mode=0644 126./etc/ntp.conf type=file mode=0644 optional 127./etc/pam.conf type=file mode=0644 optional 128./etc/pam.d type=dir mode=0755 129./etc/pam.d/display_manager type=file mode=0644 130./etc/pam.d/ftpd type=file mode=0644 131./etc/pam.d/gdm type=file mode=0644 132./etc/pam.d/imap type=file mode=0644 133./etc/pam.d/kde type=file mode=0644 134./etc/pam.d/login type=file mode=0644 135./etc/pam.d/other type=file mode=0644 136./etc/pam.d/passwd type=file mode=0644 137./etc/pam.d/pop3 type=file mode=0644 138./etc/pam.d/ppp type=file mode=0644 139./etc/pam.d/rexecd type=file mode=0644 140./etc/pam.d/rsh type=file mode=0644 141./etc/pam.d/sshd type=file mode=0644 142./etc/pam.d/su type=file mode=0644 143./etc/pam.d/system type=file mode=0644 144./etc/pam.d/telnetd type=file mode=0644 145./etc/pam.d/xdm type=file mode=0644 146./etc/pam.d/xserver type=file mode=0644 147./etc/passwd type=file mode=0644 148./etc/passwd.conf type=file mode=0644 optional 149./etc/pf.conf type=file mode=0644 150./etc/pf.os type=file mode=0444 151./etc/phones type=file mode=0644 152./etc/postfix type=dir mode=0755 optional 153./etc/postfix/main.cf type=file mode=0644 optional 154./etc/postfix/master.cf type=file mode=0644 optional 155./etc/powerd type=dir mode=0755 optional 156./etc/powerd/scripts type=dir mode=0755 optional 157./etc/powerd/scripts/acadapter type=file mode=0555 optional 158./etc/powerd/scripts/hotkey_button type=file mode=0555 optional 159./etc/powerd/scripts/lid_switch type=file mode=0555 optional 160./etc/powerd/scripts/power_button type=file mode=0555 optional 161./etc/powerd/scripts/reset_button type=file mode=0555 optional 162./etc/powerd/scripts/sensor_battery type=file mode=0555 optional 163./etc/powerd/scripts/sensor_drive type=file mode=0555 optional 164./etc/powerd/scripts/sensor_fan type=file mode=0555 optional 165./etc/powerd/scripts/sensor_indicator type=file mode=0555 optional 166./etc/powerd/scripts/sensor_power type=file mode=0555 optional 167./etc/powerd/scripts/sensor_resistance type=file mode=0555 optional 168./etc/powerd/scripts/sensor_temperature type=file mode=0555 optional 169./etc/powerd/scripts/sensor_voltage type=file mode=0555 optional 170./etc/powerd/scripts/sleep_button type=file mode=0555 optional 171./etc/ppp type=dir mode=0755 optional 172./etc/ppp/options type=file mode=0644 optional 173./etc/printcap type=file mode=0644 174./etc/profile type=file mode=0644 175./etc/protocols type=file mode=0644 176./etc/racoon type=dir mode=0755 optional 177./etc/racoon/racoon.conf type=file mode=0644 optional 178./etc/racoon/psk.txt type=file mode=0600 optional tags=nodiff 179./etc/rbootd.conf type=file mode=0644 optional 180./etc/rc type=file mode=0644 181./etc/rc.conf type=file mode=0644 182./etc/rc.d type=dir mode=0755 183./etc/rc.d/DAEMON type=file mode=0555 184./etc/rc.d/DISKS type=file mode=0555 185./etc/rc.d/LOGIN type=file mode=0555 186./etc/rc.d/NETWORKING type=file mode=0555 187./etc/rc.d/SERVERS type=file mode=0555 188./etc/rc.d/accounting type=file mode=0555 189./etc/rc.d/altqd type=file mode=0555 190./etc/rc.d/amd type=file mode=0555 191./etc/rc.d/apmd type=file mode=0555 192./etc/rc.d/bluetooth type=file mode=0555 193./etc/rc.d/bootconf.sh type=file mode=0555 194./etc/rc.d/bootparams type=file mode=0555 195./etc/rc.d/ccd type=file mode=0555 196./etc/rc.d/cgd type=file mode=0555 197./etc/rc.d/cleartmp type=file mode=0555 198./etc/rc.d/cron type=file mode=0555 199./etc/rc.d/devpubd type=file mode=0555 200./etc/rc.d/dhclient type=file mode=0555 201./etc/rc.d/dhcpcd type=file mode=0555 202./etc/rc.d/dhcpd type=file mode=0555 203./etc/rc.d/dhcrelay type=file mode=0555 204./etc/rc.d/dmesg type=file mode=0555 205./etc/rc.d/downinterfaces type=file mode=0555 206./etc/rc.d/envsys type=file mode=0555 207./etc/rc.d/fsck type=file mode=0555 208./etc/rc.d/fsck_root type=file mode=0555 209./etc/rc.d/ftp_proxy type=file mode=0555 210./etc/rc.d/ftpd type=file mode=0555 211./etc/rc.d/gpio type=file mode=0555 212./etc/rc.d/hostapd type=file mode=0555 213./etc/rc.d/httpd type=file mode=0555 214./etc/rc.d/identd type=file mode=0555 215./etc/rc.d/ifwatchd type=file mode=0555 216./etc/rc.d/inetd type=file mode=0555 217./etc/rc.d/ipfilter type=file mode=0555 218./etc/rc.d/ipfs type=file mode=0555 219./etc/rc.d/ipmon type=file mode=0555 220./etc/rc.d/ipnat type=file mode=0555 221./etc/rc.d/ipsec type=file mode=0555 222./etc/rc.d/irdaattach type=file mode=0555 223./etc/rc.d/iscsi_target type=file mode=0555 224./etc/rc.d/iscsid type=file mode=0555 225./etc/rc.d/isdnd type=file mode=0555 226./etc/rc.d/isibootd type=file mode=0555 227./etc/rc.d/kdc type=file mode=0555 228./etc/rc.d/ldconfig type=file mode=0555 229./etc/rc.d/ldpd type=file mode=0555 230./etc/rc.d/local type=file mode=0555 231./etc/rc.d/lpd type=file mode=0555 232./etc/rc.d/lvm type=file mode=0555 233./etc/rc.d/makemandb type=file mode=0555 234./etc/rc.d/mdnsd type=file mode=0555 235./etc/rc.d/mixerctl type=file mode=0555 236./etc/rc.d/modules type=file mode=0555 237./etc/rc.d/mopd type=file mode=0555 238./etc/rc.d/motd type=file mode=0555 239./etc/rc.d/mountall type=file mode=0555 240./etc/rc.d/mountcritlocal type=file mode=0555 241./etc/rc.d/mountcritremote type=file mode=0555 242./etc/rc.d/mountd type=file mode=0555 243./etc/rc.d/moused type=file mode=0555 244./etc/rc.d/mrouted type=file mode=0555 245./etc/rc.d/named type=file mode=0555 246./etc/rc.d/ndbootd type=file mode=0555 247./etc/rc.d/network type=file mode=0555 248./etc/rc.d/newsyslog type=file mode=0555 249./etc/rc.d/nfsd type=file mode=0555 250./etc/rc.d/nfslocking type=file mode=0555 251./etc/rc.d/npf type=file mode=0555 252./etc/rc.d/ntpd type=file mode=0555 253./etc/rc.d/ntpdate type=file mode=0555 254./etc/rc.d/perusertmp type=file mode=0555 255./etc/rc.d/pf type=file mode=0555 256./etc/rc.d/pf_boot type=file mode=0555 257./etc/rc.d/pflogd type=file mode=0555 258./etc/rc.d/postfix type=file mode=0555 259./etc/rc.d/powerd type=file mode=0555 260./etc/rc.d/ppp type=file mode=0555 261./etc/rc.d/pwcheck type=file mode=0555 262./etc/rc.d/quota type=file mode=0555 263./etc/rc.d/racoon type=file mode=0555 264./etc/rc.d/raidframe type=file mode=0555 265./etc/rc.d/raidframeparity type=file mode=0555 266./etc/rc.d/random_seed type=file mode=0555 267./etc/rc.d/rarpd type=file mode=0555 268./etc/rc.d/rbootd type=file mode=0555 269./etc/rc.d/rndctl type=file mode=0555 270./etc/rc.d/root type=file mode=0555 271./etc/rc.d/route6d type=file mode=0555 272./etc/rc.d/routed type=file mode=0555 273./etc/rc.d/rpcbind type=file mode=0555 274./etc/rc.d/rtadvd type=file mode=0555 275./etc/saslc.d type=dir mode=0755 276./etc/saslc.d/postfix type=dir mode=0755 277./etc/saslc.d/postfix/mech type=dir mode=0755 278./etc/saslc.d/saslc type=dir mode=0755 279./etc/saslc.d/saslc/mech type=dir mode=0755 280./etc/rc.d/rtclocaltime type=file mode=0555 281./etc/rc.d/rwho type=file mode=0555 282./etc/rc.d/savecore type=file mode=0555 283./etc/rc.d/screenblank type=file mode=0555 284./etc/rc.d/securelevel type=file mode=0555 285./etc/rc.d/sshd type=file mode=0555 286./etc/rc.d/staticroute type=file mode=0555 287./etc/rc.d/swap1 type=file mode=0555 288./etc/rc.d/swap2 type=file mode=0555 289./etc/rc.d/sysctl type=file mode=0555 290./etc/rc.d/sysdb type=file mode=0555 291./etc/rc.d/syslogd type=file mode=0555 292./etc/rc.d/timed type=file mode=0555 293./etc/rc.d/tpctl type=file mode=0555 294./etc/rc.d/ttys type=file mode=0555 295./etc/rc.d/veriexec type=file mode=0555 296./etc/rc.d/virecover type=file mode=0555 297./etc/rc.d/wdogctl type=file mode=0555 298./etc/rc.d/wpa_supplicant type=file mode=0555 299./etc/rc.d/wscons type=file mode=0555 300./etc/rc.d/wsmoused type=file mode=0555 301./etc/rc.d/xdm type=file mode=0555 optional 302./etc/rc.d/xfs type=file mode=0555 optional 303./etc/rc.d/ypbind type=file mode=0555 304./etc/rc.d/yppasswdd type=file mode=0555 305./etc/rc.d/ypserv type=file mode=0555 306./etc/rc.local type=file mode=0644 optional 307./etc/rc.shutdown type=file mode=0644 308./etc/rc.shutdown.local type=file mode=0644 optional 309./etc/rc.subr type=file mode=0644 310./etc/remote type=file mode=0644 311./etc/resolv.conf type=file mode=0644 optional 312./etc/rpc type=file mode=0644 313./etc/rtadvd.conf type=file mode=0644 optional 314./etc/security type=file mode=0644 315./etc/security.conf type=file mode=0644 316./etc/security.local type=file mode=0644 optional 317./etc/services type=file mode=0644 318./etc/shells type=file mode=0644 319./etc/shosts.equiv type=file mode=0600 optional tags=nodiff 320./etc/skel type=dir mode=0755 optional 321./etc/spwd.db type=file mode=0600 tags=exclude tags=nodiff 322./etc/ssh type=dir mode=0755 optional 323./etc/ssh/ssh_config type=file mode=0644 optional 324./etc/ssh/ssh_host_dsa_key type=file mode=0600 optional tags=nodiff 325./etc/ssh/ssh_host_dsa_key.pub type=file mode=0644 optional 326./etc/ssh/ssh_host_ecdsa_key type=file mode=0600 optional tags=nodiff 327./etc/ssh/ssh_host_ecdsa_key.pub type=file mode=0644 optional 328./etc/ssh/ssh_host_key type=file mode=0600 optional tags=nodiff tags=nodiff 329./etc/ssh/ssh_host_key.pub type=file mode=0644 optional 330./etc/ssh/ssh_host_rsa_key type=file mode=0600 optional tags=nodiff 331./etc/ssh/ssh_host_rsa_key.pub type=file mode=0644 optional 332./etc/ssh/ssh_known_hosts type=file mode=0644 optional 333./etc/ssh/ssh_known_hosts2 type=file mode=0644 optional 334./etc/ssh/sshd_config type=file mode=0644 optional 335./etc/sysctl.conf type=file mode=0644 336./etc/syslog.conf type=file mode=0644 337./etc/ttyaction type=file mode=0644 optional 338./etc/ttys type=file mode=0644 339./etc/usermgmt.conf type=file mode=0644 optional 340./etc/weekly type=file mode=0644 341./etc/weekly.conf type=file mode=0644 342./etc/weekly.local type=file mode=0644 optional 343./etc/wscons.conf type=file mode=0644 344./etc/zfs type=dir mode=0755 345 346./private type=dir mode=0755 optional 347./private/tmp type=dir mode=0111 optional ignore 348 349./root type=dir mode=0755 350./root/.cshrc type=file mode=0644 351./root/.klogin type=file mode=0600 optional tags=nodiff 352./root/.login type=file mode=0644 353./root/.profile type=file mode=0644 354./root/.rhosts type=file mode=0600 optional tags=nodiff 355./root/.shosts type=file mode=0600 optional tags=nodiff 356./root/.ssh type=dir mode=0700 optional 357./root/.ssh/authorized_keys type=file mode=0600 optional tags=nodiff 358./root/.ssh/authorized_keys2 type=file mode=0600 optional tags=nodiff 359./root/.ssh/config type=file mode=0644 optional 360./root/.ssh/id_dsa type=file mode=0600 optional tags=nodiff 361./root/.ssh/id_dsa.pub type=file mode=0644 optional 362./root/.ssh/id_rsa type=file mode=0600 optional tags=nodiff 363./root/.ssh/id_rsa.pub type=file mode=0644 optional 364./root/.ssh/identity type=file mode=0600 optional tags=nodiff 365./root/.ssh/identity.pub type=file mode=0644 optional 366./root/.ssh/known_hosts type=file mode=0644 optional 367./root/.ssh/known_hosts2 type=file mode=0644 optional 368 369./sbin type=dir mode=0755 ignore 370 371./usr type=dir mode=0755 372./usr/bin type=dir mode=0755 ignore 373./usr/games type=dir mode=0755 optional 374./usr/games/hide type=dir mode=0750 gname=games ignore optional 375./usr/include type=dir mode=0755 ignore 376./usr/lib type=dir mode=0755 ignore 377./usr/libdata type=dir mode=0755 ignore 378./usr/libexec type=dir mode=0755 ignore 379./usr/pkg type=dir mode=0755 ignore optional 380./usr/sbin type=dir mode=0755 ignore 381./usr/share type=dir mode=0755 ignore 382 383./var type=dir mode=0755 384./var/account type=dir mode=0755 385./var/account/acct type=file mode=0644 optional tags=exclude 386./var/at type=dir mode=0755 ignore 387./var/backups type=dir mode=0755 ignore 388./var/chroot type=dir mode=0755 389./var/chroot/ftp-proxy type=dir mode=0755 390./var/chroot/named type=dir mode=0755 391./var/chroot/named/dev type=dir mode=0755 392./var/chroot/named/etc type=dir mode=0755 393./var/chroot/named/etc/namedb type=dir mode=0755 394./var/chroot/named/etc/namedb/cache type=dir mode=0775 uname=named gname=named 395./var/chroot/named/etc/namedb/keys type=dir mode=0775 uname=named gname=named 396./var/chroot/named/usr type=dir mode=0755 397./var/chroot/named/usr/libexec type=dir mode=0755 398./var/chroot/named/var type=dir mode=0755 399./var/chroot/named/var/run type=dir mode=0775 gname=named 400./var/chroot/named/var/tmp type=dir mode=01775 gname=named 401./var/chroot/ntpd type=dir mode=0755 402./var/chroot/ntpd/dev type=dir mode=0755 403./var/chroot/ntpd/var type=dir mode=0755 404./var/chroot/ntpd/var/db type=dir mode=0775 gname=ntpd 405./var/chroot/ntpd/var/run type=dir mode=0775 gname=ntpd 406./var/chroot/pflogd type=dir mode=0755 407./var/chroot/rtadvd type=dir mode=0755 408./var/chroot/rtadvd/etc type=dir mode=0755 409./var/chroot/rtadvd/var type=dir mode=0755 410./var/chroot/rtadvd/var/run type=dir mode=0775 gname=_rtadvd 411./var/chroot/sshd type=dir mode=0755 412./var/chroot/tcpdump type=dir mode=0755 413./var/chroot/tftp-proxy type=dir mode=0755 414./var/cron type=dir mode=0755 415./var/cron/tabs type=dir mode=0700 416./var/cron/tabs/root type=file mode=0600 tags=nodiff 417./var/db type=dir mode=0755 418./var/log type=dir mode=0755 419./var/log/authlog type=file mode=0600 optional tags=exclude 420./var/log/lastlog type=file mode=0664 gname=utmp tags=exclude 421./var/log/lastlogx type=file mode=0664 gname=utmp tags=exclude 422./var/log/wtmp type=file mode=0664 gname=utmp tags=exclude 423./var/log/wtmpx type=file mode=0664 gname=utmp tags=exclude 424./var/mail type=dir mode=1777 ignore 425./var/preserve type=dir mode=0755 ignore 426./var/run type=dir mode=0755 427./var/run/mdnsd type=dir mode=0755 gname=_mdnsd uname=_mdnsd optional 428./var/run/utmp type=file mode=0664 gname=utmp tags=exclude 429./var/run/utmpx type=file mode=0664 gname=utmp tags=exclude 430./var/spool type=dir mode=0755 431./var/spool/ftp type=dir mode=0755 optional 432./var/spool/ftp/bin type=dir mode=0755 optional 433./var/spool/ftp/bin/ls type=file mode=0555 optional 434./var/spool/ftp/etc type=dir mode=0755 optional 435./var/spool/ftp/etc/group type=file mode=0644 optional 436./var/spool/ftp/etc/localtime type=file mode=0644 optional 437./var/spool/ftp/etc/master.passwd type=file mode=0600 optional tags=nodiff 438./var/spool/ftp/etc/passwd type=file mode=0644 optional 439./var/spool/ftp/hidden type=dir mode=0111 ignore optional 440./var/spool/ftp/pub type=dir mode=0775 ignore optional 441./var/spool/output type=dir mode=0755 ignore 442./var/yp type=dir mode=0755 443./var/yp/Makefile type=file mode=0644 optional 444