From: deraadt <deraadt@openbsd.org>
Date: Sat, 3 Jun 2017 22:27:41 +0000 (+0000)
Subject: After installing, chmod og-rwx {/bsd bsd.mp bsd.sp bsd.rd }
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=9699a8b292be2dfe85d9ec50af6c6e342064793f;p=openbsd

After installing, chmod og-rwx {/bsd bsd.mp bsd.sp bsd.rd }
(Should we make them kmem readable?  Let's ignore that for now and see
if any issues surface).
ok tb rpe
---

diff --git a/distrib/miniroot/install.sub b/distrib/miniroot/install.sub
index 268dd38cd4d..56f460a655a 100644
--- a/distrib/miniroot/install.sub
+++ b/distrib/miniroot/install.sub
@@ -1,5 +1,5 @@
 #!/bin/ksh
-#	$OpenBSD: install.sub,v 1.1013 2017/05/31 08:02:56 tb Exp $
+#	$OpenBSD: install.sub,v 1.1014 2017/06/03 22:27:41 deraadt Exp $
 #
 # Copyright (c) 1997-2015 Todd Miller, Theo de Raadt, Ken Westerback
 # Copyright (c) 2015, Robert Peichaer <rpe@openbsd.org>
@@ -2626,6 +2626,7 @@ finish_up() {
 	make_dev $(bioctl $ROOTDISK 2>/dev/null | sed -n 's/.*<\(.*\)>$/\1/p')
 	md_installboot $ROOTDISK
 
+	chmod og-rwx /mnt/bsd{,.mp,.rd} 2>/dev/null
 	if [[ -f /mnt/bsd.mp ]] && ((NCPU > 1)); then
 		echo "Multiprocessor machine; using bsd.mp instead of bsd."
 		mv /mnt/bsd /mnt/bsd.sp 2>/dev/null