Bug 23851 - [FR] a bit more tight permissions on /etc/bacula/
: [FR] a bit more tight permissions on /etc/bacula/
Status: CLOSED FIXED
: Sisyphus
(All bugs in Sisyphus/bacula-common)
: unstable
: all Linux
: P3 enhancement
Assigned To:
:
:
:
:
:
  Show dependency tree
 
Reported: 2010-08-05 15:47 by
Modified: 2010-08-20 15:17 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2010-08-05 15:47:03
It might be reasonable to tighten the directory mode from 755 to 750 given that
its group is "bacula" so unprivileged Bacula processes will still have the
access but occasional user will not (even if a password-containing file
permissions got loose).

I've tested the proposed change on 5.0.2-alt1 and all of bacula-{dir,fd,sd}
seem fine with this.
------- Comment #1 From 2010-08-06 19:24:17 -------
I can't remember why these permissons were used (occasionaly or something like
web gui works wrong). I'll try to tighten the directory mode with upcoming
5.0.3 release.
------- Comment #2 From 2010-08-06 19:25:52 -------
Ah, web/tray/bat aren't there yet over here, might have missed it.  Thanks!
------- Comment #3 From 2010-08-20 14:53:13 -------
bacula-5.0.3-alt1 -> sisyphus:

* Thu Aug 19 2010 Vitaly Kuznetsov <vitty@altlinux> 5.0.3-alt1
- 5.0.3
- install bat help files (mike@, ALT #23858)
- tightened permissions on /etc/bacula/ (ALT #23851)
------- Comment #4 From 2010-08-20 15:17:16 -------
thx :)