[icinga-checkins] icinga.org: icinga-core/mfriedrich/core: icinga.spec: fix permissions on ido2db.cfg potentially world readable (Aaron Russo) #2897 - MF

git at icinga.org git at icinga.org
Mon Aug 27 10:36:18 CEST 2012


Module: icinga-core
Branch: mfriedrich/core
Commit: 96610f3be421450cd8ed3541e4dbd8ea92fb43f3
URL:    https://git.icinga.org/?p=icinga-core.git;a=commit;h=96610f3be421450cd8ed3541e4dbd8ea92fb43f3

Author: Michael Friedrich <michael.friedrich at univie.ac.at>
Date:   Mon Aug 27 10:35:38 2012 +0200

icinga.spec: fix permissions on ido2db.cfg potentially world readable (Aaron Russo) #2897 - MF

fixes #2987

---

 Changelog   |    2 ++
 icinga.spec |    3 ++-
 2 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/Changelog b/Changelog
index f47e060..8da8362 100644
--- a/Changelog
+++ b/Changelog
@@ -80,6 +80,8 @@ FIXES
 * idoutils: set result handle explicitely to NULL after dbi_result_free() to prevent memory free'ing corruption #2612 - MF/GB
 * idoutils: fix ignoring mysql password in create_mysqldb.sh #2994 - MF
 
+* icinga.spec: fix permissions on ido2db.cfg potentially world readable (Aaron Russo) #2897 - MF
+
 CHANGES
 
 * core: neb struct statechange data += long_ouput #2650 - MF
diff --git a/icinga.spec b/icinga.spec
index 68ef105..a613df6 100644
--- a/icinga.spec
+++ b/icinga.spec
@@ -388,7 +388,7 @@ fi
 %defattr(-,root,root,-)
 %doc README LICENSE Changelog UPGRADING module/idoutils/db README.RHEL README.RHEL.idoutils
 %attr(755,-,-) %{_initrddir}/ido2db
-%config(noreplace) %{_sysconfdir}/%{name}/ido2db.cfg
+attr(660,root,root) %config(noreplace) %{_sysconfdir}/%{name}/ido2db.cfg
 %config(noreplace) %{_sysconfdir}/%{name}/idomod.cfg
 %config(noreplace) %{_sysconfdir}/%{name}/modules/idoutils.cfg
 %config(noreplace) %{_sysconfdir}/%{name}/objects/ido2db_check_proc.cfg
@@ -415,6 +415,7 @@ fi
 - add devel package, installing header files to include/
 - use --with-mainurl from upstream to set the default to /icinga/cgi-bin/status.cgi?host=all&type=detail&servicestatustypes=29
 - forgot to check on old icinga.cfg entries not matching - enforce that once
+- change permissions on ido2db.cfg, not being world readable (Aaron Russo) #2987
 
 * Sun May 06 2012 Michael Friedrich <michael.friedrich at univie.ac.at> - 1.7.0-1
 - drop idoutils, add idoutils-libdbi-mysql and idoutils-libdbi-pgsql





More information about the icinga-checkins mailing list