[Bug 704674] [NEW] mumble-server creates world readable config file

[Felix Geyer]

Public bug reported:

Binary package hint: mumble

mumble-server creates the config file /etc/mumble-server.ini
and doesn't change the permissions so it is world readable (0644).

The config file contains sensitive information like the server and sql
password.

** Affects: mumble (Ubuntu)
     Importance: High
         Status: Fix Released

** Affects: mumble (Ubuntu Lucid)
     Importance: High
         Status: New

** Affects: mumble (Ubuntu Maverick)
     Importance: High
         Status: New

** Affects: mumble (Debian)
     Importance: Unknown
         Status: Unknown

** Bug watch added: Debian Bug tracker #609919
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609919

** Also affects: mumble (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609919
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Debian
VoIP Team, which is subscribed to mumble in ubuntu.
https://bugs.launchpad.net/bugs/704674

Title:
  mumble-server creates world readable config file