# Permissions list for files

# Owner Group Mode DirMode FileMode Type Absolute_path

# Set UID root programs
root root	4755 - -	single	/bin/busybox
root sysctrl	4750 - -	single	/sbin/reboot
root root	4755 - -	single	/bin/suexec

root timing	4750 - -	single	/sbin/setisodate
root root	4755 - -	single	/usr/lib/postoffice
root root	4755 - -	single	/usr/bin/crontab

# Important system directories
root root	0755 - -	single	/
root root	0755 - -	single	/etc
root root	01777 - -	single	/tmp
root root	0755 - -	single	/usr
root root	0755 - -	single	/var
root root	01777 - -	single	/var/tmp
root root	0700 - -	single	/lost+found
root root	0700 - -	single	/media/flash_module/lost+found

# Set GID service configuration directories
root conf	2775 - -	single	/etc/conf.d
root conf	2775 2775 664	tree	/etc/data-in-cd11
root conf	2775 2775 664	tree	/etc/data-mux-cd11
root conf	2775 2775 664	tree	/etc/data-out-cd11
root conf	2775 2775 664	tree	/etc/gcf-in-brp
root conf	2775 2775 664	tree	/etc/gcf-in-scream
root conf	2775 2775 664	tree	/etc/gcf-out-brp
root conf	2775 2775 664	tree	/etc/gcf-out-scream
root conf	2775 2775 664	tree	/etc/gdi-base
root conf	2775 2775 664	tree	/etc/gdi-link-rx
root conf	2775 2775 664	tree	/etc/gdi-link-tx
root conf	2775 - -	single	/etc/gdi-trigger
root conf	2775 2775 664	tree	/etc/gdi2cd11
root postgres	2775 2775 664	tree	/etc/gdi2dbi
root conf	2775 2775 664	tree	/etc/gdi2ew
root conf	2775 2775 664	tree	/etc/gdi2gcf
root conf	2775 2775 664	tree	/etc/gdi2miniseed
root conf	2775 2775 664	tree	/etc/gsms-out
root conf	2775 2775 664	tree	/etc/gstm-client
root conf	2775 2775 664	tree	/etc/gstm-server
root conf	2775 - -	single	/etc/infoblocks.local
root netconf	2775 2775 664	tree	/etc/iptables.local
root conf	2775 2775 664	tree	/etc/msmodbus-in
root netconf	2775 2775 664	tree	/etc/network.local
root postgres	2775 2775 664	tree	/etc/postgres
root conf	2775 2775 664	tree	/etc/pppd-watchdog
root conf	2775 2775 664	tree	/etc/qscd-out
root conf	2775 2775 664	tree	/etc/seedlink-out
root conf	2775 2775 664	tree	/etc/timezone
root conf	2775 2775 664	tree	/etc/win-out
root conf	2775 2775 664	tree	/etc/xmlstatus-assert

# Individual configuration items
root root	0600 - -	single	/etc/remote-assist/client.key
#cron
root root	0600 - -	single	/etc/crontab
#misc--ioline
root conf	2775 - -	single	/etc/ioline/
root conf	 664 - -	single	/etc/ioline/ioline.local
root conf	 664 - -	single	/etc/ioline/name_map.local
root conf	2775 2775 664	tree	/etc/ioline/ina209
root conf	2775 2775 664	tree	/etc/tamperd
root conf	2775 2775 664	tree	/etc/envirologd
#net--mta
root conf	 775 - -	single	/etc/mail
root conf	 664 - -	single	/etc/mail/postoffice.cf
root conf	 664 - -	single	/etc/mail/aliases
root conf	 664 - -	single	/etc/conf.d/mta
#net--ntp
root conf	 664 - -	single	/etc/ntp.conf.local
#rec
root conf	2775 2775 664	tree	/etc/gdi-record
root conf	2775 2775 664	tree	/etc/Pt-storage
#task--dirclean
root conf	2775 2775 664	tree	/etc/directory-cleaner
#top--hostname
root netconf	 664 - - 	single	/etc/conf.d/hostname.local
# system-statusd
root conf	2775 - -	single	/etc/system-statusd
root conf	 664 - -	single	/etc/system-statusd/default.local
#libspyrus users
root spyrus	2770 - -	single	/etc/spyrus
root spyrus	 660 - -	single	/etc/spyrus/spyrus.local

# serial ports
root dialout	02775 02775 0664 tree	/etc/conf.d/serial.local
root instcfg	02775 02775 0664 tree	/etc/conf.d/serial.local/lowlatency-cd24-in

# Now the configuration templates (GCS displays key off these).
root conf	- - -	single	/usr/share/config-base/templates/data-in-cd11.tpl
root conf	- - -	single	/usr/share/config-base/templates/data-mux-cd11.tpl
root conf	- - -	single	/usr/share/config-base/templates/data-out-cd11.tpl
root conf	- - -	single	/usr/share/config-base/templates/dirclean.tpl
root conf	- - -	single	/usr/share/config-base/templates/dircleansub.tpl
root conf	- - -	single	/usr/share/config-base/templates/gcf-in-brp.tpl
root conf	- - -	single	/usr/share/config-base/templates/gcf-in-scream.tpl
root conf	- - -	single	/usr/share/config-base/templates/gcf-out-brp.tpl
root conf	- - -	single	/usr/share/config-base/templates/gcf-out-scream.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi-base.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi-link-rx.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi-link-tx.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi2cd11.tpl
root postgres	- - -	single	/usr/share/config-base/templates/gdi2dbi.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi2ew.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi2gcf.tpl
root conf	- - -	single	/usr/share/config-base/templates/gdi2miniseed.tpl
root conf	- - -	single	/usr/share/config-base/templates/gsms-out.tpl
root conf	- - -	single	/usr/share/config-base/templates/gstm-client.tpl
root conf	- - -	single	/usr/share/config-base/templates/gstm-server.tpl
root netconf	- - -	single	/usr/share/config-base/templates/hostname.tpl
root conf	- - -	single	/usr/share/config-base/templates/misc-ioline.tpl
root netconf	- - -	single	/usr/share/config-base/templates/mta.tpl
root netconf	- - -	single	/usr/share/config-base/templates/networkif.tpl
root postgres	- - -	single	/usr/share/config-base/templates/postgres.tpl
root conf	- - -	single	/usr/share/config-base/templates/pppd-watchdog.tpl
root conf	- - -	single	/usr/share/config-base/templates/qscd-out.tpl
root conf	- - -	single	/usr/share/config-base/templates/rec-top.tpl
root conf	- - -	single	/usr/share/config-base/templates/seedlink-out.tpl
root conf	- - -	single	/usr/share/config-base/templates/statustop.tpl
root root	- - -	single	/usr/share/config-base/templates/user.tpl
root root	- - -	single	/usr/share/config-base/templates/usertop.tpl
root conf	- - -	single	/usr/share/config-base/templates/win-out.tpl
root netconf	- - -	single	/usr/share/config-base/templates/wlan.tpl
root netconf	- - -	single	/usr/share/config-base/templates/wlan_net.tpl

# FFTW3 wisdom saved in here
root	daemon	0775 - -	single	/etc/fftw3

# Data directories
daemon	data	0755 0755 0644	tree	/var/spool/recdata
daemon	daemon	0755 0755 0644	tree	/var/spool/to-rdisk
daemon	daemon	0775 0775 0664	tree	/var/log/gcflog
daemon	inst	0755 0755 0644	tree	/var/log/libterminal
root	root	01777 - -	single	/var/crash
daemon	daemon	0775 0775 0664	tree	/var/lib/gcf-out-scream
daemon	gpio	0755 0755 0644	tree	/var/lib/envirolog
daemon	gpio	0755 0755 0644	tree	/var/lib/tamper
daemon	data	0755 - -	single	/var/lib/infoblocks

# Directory and file for the system-statusd reboot list file
daemon	daemon	755 - -	single	/var/lib/system-statusd
daemon	daemon	644 - -	single	/var/lib/system-statusd/reboots_list

# Need correct ownership of authorized_keys for ssh access
root	root	- - -		single	/root
root	root	700 - -		single	/root/.ssh
root	root	600 - -		single	/root/.ssh/authorized_keys
