World writable /usr/local/sbin/bootstrap_admin_node.sh

Bug #1646820 reported by Adam Heczko
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Invalid
Medium
Adam Heczko

Bug Description

Detailed bug description:
/usr/local/sbin/bootstrap_admin_node.sh

Remove world write permissions
For each world-writable file, determine whether there is a good reason for it to be world writable. If not, remove world write permissions for the file.

Changed in fuel:
assignee: nobody → MOS Maintenance (mos-maintenance)
Revision history for this message
Denis Meltsaykin (dmeltsaykin) wrote :

Adam, could you please clarify why is that considered as a problem? Given that this script runs only once at the installation time and a master node is only accessible via a trusted network, it seems like you overcomplicate things.

Changed in fuel:
status: New → Incomplete
assignee: MOS Maintenance (mos-maintenance) → Adam Heczko (aheczko-mirantis)
Revision history for this message
Denis Meltsaykin (dmeltsaykin) wrote :

Moving to Invalid after a month in Incomplete.

Changed in fuel:
milestone: 8.0-mu-4 → 8.0-updates
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.