On Mon, Oct 20, 2008 at 03:37:42PM +0200, maximilian attems wrote:
> On Sun, 19 Oct 2008, Mario 'BitKoenig' Holbe wrote:
> > I have loop-aes-utils installed which sets UMASK=0077 in
> > /usr/share/initramfs-tools/conf.d/loopaes. This seems to be respected by
> > update-initramfs but not by mkinitramfs-kpkg.
> mkinitramfs-kpkg is meant to die after release.
Well, this might be true, but it doesn't fix the issue for this release.
And, as we all know, Debian releases live long ;)
The reason given by loopaes for setting UMASK is that the cpio archive
might contain cryptographic key material. So, a decision regarding this
issue should rather answer the question whether it is okay or not to
express those keys to everybody than the question if mkinitramfs-kpkg is
meant to die in some future release.
Mario
--
But after a while I learned the trick of speaking fast. You don't have
to think any faster; just use twice as many words to say everything.
-- Paul Graham
Attachment:
signature.asc
Description: Digital signature