[DebianGIS-dev] Bug#572032: world readable file ~/.josm/preferences contains password in plaintext
David Paleino
dapal at debian.org
Mon Mar 1 17:20:22 UTC 2010
tags 572032 confirmed
thanks
Hello,
On Monday 01 March 2010 07:44:50, Jonas Stein wrote:
> Package: josm
> Version: 0.0.svn2255-1
> Justification: Policy 10.9
> Severity: serious
>
> ls -al ~/.josm/preferences
> returns -rw-r--r--
>
> The problem with the plaintext password is nothing new.
> But it is dangerous and could be avoided.
> Josm should at least chmod 700 this file.
I'm confirming this bug, will solve it ASAP.
Kindly,
David
--
. ''`. Debian developer | http://wiki.debian.org/DavidPaleino
: :' : Linuxer #334216 --|-- http://www.hanskalabs.net/
`. `'` GPG: 1392B174 ----|----
`- 2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-grass-devel/attachments/20100301/51fabe76/attachment.pgp>
More information about the Pkg-grass-devel
mailing list