[Pkg-matrix-maintainers] matrix-synapse: file permissions too allowing

Harri Suutari harri at kallio.dynu.net
Sat Oct 10 13:09:20 BST 2020


Hi,

a notice about the current Debian Backports package "matrix-synapse".
Version: 1.20.1-1~bpo10+1

Permissions for configuration and database files are readable for all at
/etc/matrix-synaps/
/var/lib/matrix-synapse/

That does not seem right, as local users and other processes can read
the files.


Regards,

-- 


      Harri





More information about the Pkg-matrix-maintainers mailing list