Bug#254068: base-config log should not be world readable
Quoting Vassilii Khachaturov (vassilii@tarunz.org):
> Package: base-config
> Version: 2.25
> Severity: normal
> Tags: security
>
> I believe that the base-config logs should not be world readable.
> Some of the packages ask for passwords that are echoed back during
> the configuration (e.g. pppoeconf), albeit stored later in files
> not readable by the world.
THen this bug pertains to what you call pppoeconf (isn't this
pppconfig ?) rather than base-config.....imho.
Reply to: