Bug 23851 - [FR] a bit more tight permissions on /etc/bacula/
Summary: [FR] a bit more tight permissions on /etc/bacula/
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: bacula-common (show other bugs)
Version: unstable
Hardware: all Linux
: P3 enhancement
Assignee: Michael Shigorin
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-08-05 15:47 MSD by Michael Shigorin
Modified: 2010-08-20 15:17 MSD (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Shigorin 2010-08-05 15:47:03 MSD 
It might be reasonable to tighten the directory mode from 755 to 750 given that its group is "bacula" so unprivileged Bacula processes will still have the access but occasional user will not (even if a password-containing file permissions got loose).

I've tested the proposed change on 5.0.2-alt1 and all of bacula-{dir,fd,sd} seem fine with this.
Comment 1 Vitaly Kuznetsov 2010-08-06 19:24:17 MSD 
I can't remember why these permissons were used (occasionaly or something like web gui works wrong). I'll try to tighten the directory mode with upcoming 5.0.3 release.
Comment 2 Michael Shigorin 2010-08-06 19:25:52 MSD 
Ah, web/tray/bat aren't there yet over here, might have missed it.  Thanks!
Comment 3 Repository Robot 2010-08-20 14:53:13 MSD 
bacula-5.0.3-alt1 -> sisyphus:

* Thu Aug 19 2010 Vitaly Kuznetsov <vitty@altlinux> 5.0.3-alt1
- 5.0.3
- install bat help files (mike@, ALT #23858)
- tightened permissions on /etc/bacula/ (ALT #23851)
Comment 4 Michael Shigorin 2010-08-20 15:17:16 MSD 
thx :)