Project

General

Profile

Actions
Copy link

Bug #11110

closed

Check permissions on /var/rudder files, particularly modified-files

Bug #11110: Check permissions on /var/rudder files, particularly modified-files

Added by Alexis Mousset almost 9 years ago. Updated almost 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Vincent MEMBRÉ
Category:
System techniques
Target version:
3.1.22
Pull Request:
https://github.com/Normation/rudder-t...
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
Operational - other Techniques | Technique editor | Rudder settings
Effort required:
Very Small
Priority:
0
Name check:
Fix check:
Regression:

Description

Modified files have the permission of the modified files, which can lead to be world-readable as the folder itself is 755.

For example, if I edit a 644 file in a 700 directory, it will be 644 in the modified-files, and accessible to everybody. There should be no need for modified-files to be world-readable, and we should enforce 700 for it.

Updated by Benoît PECCATTE almost 9 years ago Actions
Copy link
 #1

We should change the permissions of the directory, but not the ones of the files, it contains a backup information that should not be lost

Updated by Benoît PECCATTE almost 9 years ago Actions
Copy link
 #2

  • Assignee set to Benoît PECCATTE

Updated by Benoît PECCATTE almost 9 years ago Actions
Copy link
 #3

  • Status changed from New to In progress

Updated by Benoît PECCATTE almost 9 years ago Actions
Copy link
 #4

  • Status changed from In progress to Pending technical review
  • Assignee changed from Benoît PECCATTE to Vincent MEMBRÉ
  • Pull Request set to https://github.com/Normation/rudder-techniques/pull/1173

Updated by Benoît PECCATTE almost 9 years ago Actions
Copy link
 #5

  • Status changed from Pending technical review to Pending release

Updated by Vincent MEMBRÉ almost 9 years ago Actions
Copy link
 #6

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 3.1.22, 4.1.6 and 4.2.0~beta3 which were released today.

Updated by Vincent MEMBRÉ almost 7 years ago Actions
Copy link
 #7

  • Private changed from Yes to No
  • Priority changed from 92 to 0
Actions
Copy link

Also available in: PDF Atom