Project

General

Profile

Actions
Copy link

Bug #5566

closed

Post modification hooks of ncf are group writable, and it makes grsec complains

Added by Nicolas CHARLES about 10 years ago. Updated about 10 years ago.

Status:
Released
Priority:
N/A
Assignee:
Jonathan CLARKE
Category:
System integration
Target version:
2.11.4
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

The post modification hook of ncf-builder are group writable, but they should really not be (there is no need for that), and it makes grsec prevent from running it
It does need to be group executable, but not writable

Actions
Copy link

Also available in: Atom PDF