From: phessler <phessler@openbsd.org>
Date: Mon, 29 May 2017 07:49:27 +0000 (+0000)
Subject: remove the file permission check for bgpd.conf
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=db54983feae4333410ec4638093a57483b6821a8;p=openbsd

remove the file permission check for bgpd.conf

OK deraadt@, henning@, sthen@, and everyone who has ever been annoyed
---

diff --git a/usr.sbin/bgpd/parse.y b/usr.sbin/bgpd/parse.y
index 44a9df6597a..331f04e7931 100644
--- a/usr.sbin/bgpd/parse.y
+++ b/usr.sbin/bgpd/parse.y
@@ -1,4 +1,4 @@
-/*	$OpenBSD: parse.y,v 1.306 2017/05/28 15:16:33 henning Exp $ */
+/*	$OpenBSD: parse.y,v 1.307 2017/05/29 07:49:27 phessler Exp $ */
 
 /*
  * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
@@ -2737,14 +2737,6 @@ check_file_secrecy(int fd, const char *fname)
 		log_warn("cannot stat %s", fname);
 		return (-1);
 	}
-	if (st.st_uid != 0 && st.st_uid != getuid()) {
-		log_warnx("%s: owner not root or current user", fname);
-		return (-1);
-	}
-	if (st.st_mode & (S_IWGRP | S_IXGRP | S_IRWXO)) {
-		log_warnx("%s: group writable or world read/writeable", fname);
-		return (-1);
-	}
 	return (0);
 }