/etc/radicale/users is world-readable

Bug #1832752 reported by Rolf Leggewie
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
radicale (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

$ sudo ls -l /etc/radicale/users
-rw-r--r-- 1 root root 16 Sep 20 2018 /etc/radicale/users

The file contains passwords and should be readable only for a limited audience.

Rolf Leggewie (r0lf)
information type: Private Security → Public Security
Revision history for this message
Rolf Leggewie (r0lf) wrote :

turns out, I created that file by hand. Thus, not a packaging problem, but my own fault.

Changed in radicale (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.