mysql charm creates word readable password files world

Bug #1177143 reported by James Troup on 2013-05-06
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
mysql (Juju Charms Collection)
High
Juan L. Negron

Bug Description

| $ ls -l /var/lib/juju/*.passwd
| -rw-r--r-- 1 root root 17 Dec 20 03:24 /var/lib/juju/mysql-glance.passwd
| -rw-r--r-- 1 root root 17 Feb 8 14:10 /var/lib/juju/mysql-keystone.passwd
| -rw-r--r-- 1 root root 17 Dec 19 23:06 /var/lib/juju/mysql-nova.passwd
| -rw------- 1 root root 37 Dec 19 23:01 /var/lib/juju/mysql.passwd
| $ whoami
| nobody
| $

An unprivileged user shouldn't be able to read those files.

Related branches

Changed in mysql (Juju Charms Collection):
importance: Undecided → High
Marco Ceppi (marcoceppi) on 2014-02-26
Changed in mysql (Juju Charms Collection):
assignee: nobody → Juan L. Negron (negronjl)
status: New → In Progress
Mark Russell (marrusl) wrote :

When will this be merged?

Juan L. Negron (negronjl) wrote :

Merged.

Changed in mysql (Juju Charms Collection):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers