Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 1.0.0
-
Fix Version/s: 1.1.0
-
Component/s: Debian Pack
-
Security Level: Public
-
- Environment:
- -
Issue Links
| Depends | |||
|---|---|---|---|
|
|
|
||
Activity
| Field | Original Value | New Value |
|---|---|---|
| Link |
This issue blocks |
| Status | New [ 10000 ] | Open [ 10002 ] |
| Priority | Major [ 3 ] |
| Status | Open [ 10002 ] | In Progress [ 10003 ] |
| Description |
To increase security, the default preference file '{{/etc/petals-registry-cli/petals-registry-cli.default}}'' should not be readable by all users. It should be readable only by users member of a given group.
By default, the group '{{petals}}' will be used to protect the preference file. If needed, the group can be changed. Note: If the user running Petals Registry CLI is not a member of this group, a warning will be displayed if the mode '{{Console}}' is used: {code} user@host> petals-registry-cli -C WARNING: Your are not granted to access the default configuration file: ... petals-registry-cli> {code} |
To increase security, the default preference file '{{/etc/petals-registry-cli/petals-registry-cli.default}}'' should not be readable by all users. It should be readable only by users member of a given group.
By default, the group '{{petals}}' will be used to protect the preference file. If needed, the group can be changed. Note: If the user running Petals Registry CLI is not a member of this group, a warning will be displayed if the mode '{{Console}}' is used: {code} user@host> petals-registry-cli -C ERROR: Your are not granted to access the configuration file '/etc/petals-registry-cli/petals-registry-cli.default'. user@host> {code} |
| Status | In Progress [ 10003 ] | Resolved [ 10004 ] |
| Fix Version/s | 1.1.0 [ 10606 ] | |
| Resolution | Fixed [ 1 ] |
| Transition | Status Change Time | Execution Times | Last Executer | Last Execution Date | |||||||||
|
|
|
|
|
|||||||||
|
|
|
|
|
|||||||||
|
|
|
|
|
Now, default ACL of the preference file are:
-rw-r----- 1 root petals 914 janv. 28 15:58 petals-registry-cli.default-rw-r----- 1 root petals 914 janv. 28 15:58 petals-registry-cli.default