Bug#271715: Still invalid permissions on /etc/siproxd_passwd.cfg
Klaus Alexander Seistrup
Klaus Alexander Seistrup <debian-bugs@magnetic-ink.dk>, 271715@bugs.debian.org
Tue, 14 Sep 2004 20:49:10 +0200
Package: siproxd
Version: 0.57.snap040720-1
Severity: grave
Justification: user security hole
The files /etc/siproxd.conf and /etc/siproxd_passwd.cfg still get
installed with insecure permissions 0644:
#v+
$ ls -l /etc/siproxd*
-rw-r--r-- 1 root root 6516 Jul 24 02:11 /etc/siproxd.conf
-rw-r--r-- 1 root root 291 Jul 24 02:11 /etc/siproxd_passwd.cfg
$
#v-
even when package is installed from scratch.
NB: This is an iteration of the closed and archived bug #257470
(the BTS refused to 'reopen 257470 !').
Cheers,
// Klaus
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.21
Locale: LANG=POSIX, LC_CTYPE=da_DK
Versions of packages siproxd depends on:
ii adduser 3.59 Add and remove users and groups
ii libc6 2.3.2.ds1-16 GNU C Library: Shared libraries an
ii libgcc1 1:3.4.2-2 GCC support library
ii libosip2 2.0.6-2 Session Initiation Protocol (SIP)
-- no debconf information