Bug #1825

Mail-server: master-users file is world-readable

Added by Davide Principi over 8 years ago. Updated about 8 years ago.

Status:CLOSEDStart date:04/03/2013
Priority:HighDue date:04/03/2013
Assignee:-% Done:

100%

Category:nethserver-mail-server
Target version:v6.4-beta1
Security class: Resolution:
Affected version:v6.4-alpha2 NEEDINFO:

Description

/etc/dovecot/master-users is world readable. Fix it ASAP!

Associated revisions

Revision 0ff9136d
Added by Davide Principi over 8 years ago

/etc/dovecot/master-users template metadata: chgrp to dovecot, set permissions 0640. Refs #1825

Revision 3207b056
Added by Davide Principi over 8 years ago

/etc/cron.d/sogo template: set mode 0640 to protect dovecot master user password. Refs #1825

History

#1 Updated by Davide Principi over 8 years ago

  • Priority changed from Normal to High

#2 Updated by Davide Principi over 8 years ago

  • Due date set to 04/03/2013
  • Status changed from NEW to ON_DEV
  • Assignee set to Davide Principi
  • Start date set to 04/03/2013
  • % Done changed from 0 to 30
  • Estimated time set to 1.00

#3 Updated by Davide Principi over 8 years ago

The file must be readable by dovecot user.

#4 Updated by Davide Principi over 8 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 100

In nethserver-mail-server-1.2.0-7.0git0ff9136d.ns6.noarch

#5 Updated by Davide Principi about 8 years ago

  • Status changed from MODIFIED to CLOSED

Also available in: Atom PDF