Project

General

Profile

Actions

Bug #5566

closed

Post modification hooks of ncf are group writable, and it makes grsec complains

Added by Nicolas CHARLES about 10 years ago. Updated about 10 years ago.

Status:
Released
Priority:
N/A
Assignee:
Jonathan CLARKE
Category:
System integration
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

The post modification hook of ncf-builder are group writable, but they should really not be (there is no need for that), and it makes grsec prevent from running it
It does need to be group executable, but not writable

Actions #1

Updated by Matthieu CERDA about 10 years ago

  • Target version changed from 2.11.3 to 2.11.4
Actions #2

Updated by Jonathan CLARKE about 10 years ago

  • Status changed from New to 8
  • Assignee set to Matthieu CERDA
Actions #3

Updated by Matthieu CERDA about 10 years ago

  • Status changed from 8 to Pending technical review
  • Assignee changed from Matthieu CERDA to Jonathan CLARKE
  • % Done changed from 0 to 100
  • Pull Request set to https://github.com/Normation/rudder-packages/pull/507
Actions #4

Updated by Matthieu CERDA about 10 years ago

  • Status changed from Pending technical review to Pending release

Applied in changeset packages:commit:71872a09efe6b32a48a94b1f9dee2a8266f8dbef.

Actions #5

Updated by Jonathan CLARKE about 10 years ago

Applied in changeset packages:commit:9e1f5c661b38661cae73fcb2a4505e0b66845f18.

Actions #6

Updated by Vincent MEMBRÉ about 10 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 2.11.4, which was released today.

Actions

Also available in: Atom PDF