[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SCM] Debian package checker branch, master, updated. 2.2.18-90-ged8280a



The following commit has been merged in the master branch:
commit ed8280ae3d82480e5d447db5e8ba6a68c42c378d
Author: Russ Allbery <rra@debian.org>
Date:   Fri Dec 25 23:08:56 2009 -0800

    Allow /etc/sudoers.d files to have 0440 permissions
    
    * checks/files:
      + [RA] Allow /etc/sudoers.d files to be mode 0440 as recommended by
        sudo.  Thanks, Thijs Kinkhorst.  (Closes: #557353)

diff --git a/checks/files b/checks/files
index 5a7dd9d..dbde955 100644
--- a/checks/files
+++ b/checks/files
@@ -891,6 +891,8 @@ foreach my $file (sort keys %{$info->index}) {
 		# everything is ok
 	    } elsif ($operm == 0600 and $file =~ m,etc/backup.d/,) {
 		# backupninja expects configurations files to be 0600
+	    } elsif ($operm == 0440 and $file =~ m,etc/sudoers.d/,) {
+		# sudo recommends sudoers files be mode 0440
 	    } elsif ($operm != 0644) {
 		tag "non-standard-file-perm", $file,
 		    sprintf("%04o != 0644",$operm);
diff --git a/debian/changelog b/debian/changelog
index 1e72b8d..63c0caa 100755
--- a/debian/changelog
+++ b/debian/changelog
@@ -67,6 +67,8 @@ lintian (2.3.0) UNRELEASED; urgency=low
   * checks/files{,.desc}:
     + [RA] New check for files present in both compressed and uncompressed
       form.  Patch from Raphael Geissert.  (Closes: #546174)
+    + [RA] Allow /etc/sudoers.d files to be mode 0440 as recommended by
+      sudo.  Thanks, Thijs Kinkhorst.  (Closes: #557353)
   * checks/huge-usr-share{,.desc}:
     + [RA] Increase the thresholds to 2MB (over 50%) and 4MB (any
       percentage), and mention the thresholds in the tag description.

-- 
Debian package checker


Reply to: