[Debian-med-packaging] Bug#690165: biomaj-watcher: postinst script change permissions on global.properties

[Olivier Sallou]

Package: biomaj-watcher
Severity: normal

global.properties contains sensitive configuration information owned by root or tomcat6.
postinst script changes access permissions to read access for anyone.
postinst should keep access permissions, only modifying the owner of the file.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages biomaj-watcher depends on:
ii  biomaj                   1.2.0-10
ii  debconf [debconf-2.0]    1.5.45
ii  default-jdk              1:1.6-47
ii  libcommons-lang-java     2.6-1
ii  libcommons-logging-java  1.1.1-8
ii  libgnumail-java          1.1.2-7
ii  libjdom1-java            1.1.2+dfsg-2
ii  libjsch-java             0.1.42-2
ii  liblog4j1.2-java         1.2.16-3
ii  libquartz-java           1.6.6-1
ii  libxerces2-java          2.9.1-4.1
ii  tomcat6                  6.0.35-4
ii  unzip                    6.0-7
ii  zip                      3.0-6

biomaj-watcher recommends no packages.

biomaj-watcher suggests no packages.