base-passwd: postinstall script too open permissions

[John Morrison]

On Wed, August 20, 2008 9:14 am, Corinna Vinschen wrote:
> Hi John,
>
> do you remember the reason why the passwd-grp.sh postinstall script
> calls
>
>   chmod 777 /etc/passwd
>   chmod 777 /etc/group
>
> ?  That's not right, IMO.  The permissions should rather be 644 and
> not allow writing for everyone.
>
> Along the same lines, the `chmod a+w' calls in the second half of the
> script should better just be `chmod u+w'.
>
> Would you mind to change that, please?

Sure, although it might be tomorrow night before I get time.  What were
the changes you made to the setup.hint for base-[file/passwd] btw?

J.