Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 2.2.0
-
Fix Version/s: 2.3.0
-
Component/s: Debian Pack
-
Security Level: Public
-
- Environment:
- -
Issue Links
| Depends | |||
|---|---|---|---|
|
|
|
||
Activity
| Field | Original Value | New Value |
|---|---|---|
| Link |
This issue blocks |
| Status | New [ 10000 ] | Open [ 10002 ] |
| Priority | Major [ 3 ] |
| Status | Open [ 10002 ] | In Progress [ 10003 ] |
| Description |
To increase security, the default preference file '{{/etc/petals-cli/petals-cli.default}}'' should not be readable by all users. It should be readable only by users member of a given group.
By default, the group '{{petals}}' will be used to protect the preference file. If needed, the group can be changed. Note: If the user running Petals CLI is not a member of this group, a warning will be displayed if the mode '{{Console}}' is used: {code} user@host> petals-cli -C WARNING: Your are not granted to access the default configuration file: ... petals-cli> {code} |
To increase security, the default preference file '{{/etc/petals-cli/petals-cli.default}}'' should not be readable by all users. It should be readable only by users member of a given group.
By default, the group '{{petals}}' will be used to protect the preference file. If needed, the group can be changed. Note: If the user running Petals CLI is not a member of this group, a warning will be displayed if the mode '{{Console}}' is used: {code} user@host> petals-cli -C ERROR: Your are not granted to access the configuration file '/etc/petals-cli/petals-cli.default'. user@host> {code} |
| Status | In Progress [ 10003 ] | Resolved [ 10004 ] |
| Fix Version/s | 2.3.0 [ 10605 ] | |
| Resolution | Fixed [ 1 ] |
| Transition | Status Change Time | Execution Times | Last Executer | Last Execution Date | |||||||||
|
|
|
|
|
|||||||||
|
|
|
|
|
|||||||||
|
|
|
|
|
Now, default ACL of the preference file are:
-rw-r----- 1 root petals 1098 janv. 28 15:33 petals-cli.default-rw-r----- 1 root petals 1098 janv. 28 15:33 petals-cli.default