Bug#271715: Still invalid permissions on /etc/siproxd_passwd.cfg

Klaus Alexander Seistrup Klaus Alexander Seistrup <debian-bugs@magnetic-ink.dk>, 271715@bugs.debian.org
Tue, 14 Sep 2004 20:49:10 +0200


Package: siproxd
Version: 0.57.snap040720-1
Severity: grave
Justification: user security hole

The files /etc/siproxd.conf and /etc/siproxd_passwd.cfg still get
installed with insecure permissions 0644:

#v+

$ ls -l /etc/siproxd*
-rw-r--r--  1 root root 6516 Jul 24 02:11 /etc/siproxd.conf
-rw-r--r--  1 root root  291 Jul 24 02:11 /etc/siproxd_passwd.cfg
$ 

#v-

even when package is installed from scratch.

NB: This is an iteration of the closed and archived bug #257470
(the BTS refused to 'reopen 257470 !').

Cheers,

  // Klaus

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.21
Locale: LANG=POSIX, LC_CTYPE=da_DK

Versions of packages siproxd depends on:
ii  adduser                     3.59         Add and remove users and groups
ii  libc6                       2.3.2.ds1-16 GNU C Library: Shared libraries an
ii  libgcc1                     1:3.4.2-2    GCC support library
ii  libosip2                    2.0.6-2      Session Initiation Protocol (SIP) 

-- no debconf information