getty conosle, we removed write access for others and it's back.

[Clarence Rebolledo]

On the /dev/console we set it from crw--w--w to crw--w--- but now a few days later it back where write access to others is back as crw--w--w. Is this a function of the /usr/sbin/getty. We are being audited by our auditors and this is one problem they want to resolve.

[A. Clay Stephenson]

Anytime a getty is respawned on the console the mode is reset. This is why you are unable to make a permanent change --- nor should you. Traditionally, processes are allowed to write error messages to the console. Even if someone writes "Please re-enter root password: " to the console no harm is done even if someone actually types in the passwd UNLESS read permission is allowed on that port and that should be (and is) restricted.