Bug#609919: mumble-server creates world readable config file

Felix Geyer debfx-pkg at fobos.de
Thu Jan 13 20:09:14 UTC 2011


Package: mumble-server
Version: 1.2.2-5

mumble-server creates the config file /etc/mumble-server.ini
and sets the permissions to 0644 which allows every user to read it.

As the server password is stored in this config file it would
be much better to set the owner to root:mumble-server and the
permissions to 0640.






More information about the Pkg-voip-maintainers mailing list