[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#254068: base-config log should not be world readable



Quoting Vassilii Khachaturov (vassilii@tarunz.org):
> Package: base-config
> Version: 2.25
> Severity: normal
> Tags: security
> 
> I believe that the base-config logs should not be world readable.
> Some of the packages ask for passwords that are echoed back during
> the configuration (e.g. pppoeconf), albeit stored later in files
> not readable by the world.


THen this bug pertains to what you call pppoeconf (isn't this
pppconfig ?) rather than base-config.....imho.







Reply to: