Bug #1929: All files created with world-writable permissions - Smart Proxy - Foreman

Actions

Copy link

Bug #1929

closed

All files created with world-writable permissions

Added by Dominic Cleal over 11 years ago. Updated over 11 years ago.

Status:

Closed

Priority:

High

Assignee:

Dominic Cleal

Category:

Packaging

Target version:

1.1

Difficulty:

Triaged:

Bugzilla link:

Pull request:

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

The proxy daemon runs with a umask of 0:

(gdb) call umask(0)
$1 = 0

The files and directories it creates all have world-writable bits set, which is dangerous:

-rw-rw-rw-. 1 foreman-proxy foreman-proxy 104 Nov  7 14:51 /var/log/foreman-proxy/access.log
drwxrwxrwx. 2 foreman-proxy foreman-proxy     4096 Oct 28 22:07 /var/lib/tftpboot/boot
-rw-rw-rw-. 1 foreman-proxy foreman-proxy 24337760 May 22 20:55 /var/lib/tftpboot/boot/Fedora-17-x86_64-initrd.img
-rw-rw-rw-. 1 foreman-proxy foreman-proxy  4662160 May  7  2012 /var/lib/tftpboot/boot/Fedora-17-x86_64-vmlinuz
drwxrwxrwx. 2 foreman-proxy foreman-proxy     4096 Oct 28 22:34 /var/lib/tftpboot/pxelinux.cfg
-rw-rw-rw-. 1 foreman-proxy foreman-proxy      161 Oct 28 21:19 /var/lib/tftpboot/pxelinux.cfg/default