Package: vmm Version: 0.6.0-1 Severity: important Dear Debian folks,
the shipped example files for Postfix are world readable. Which is
probably intended as normal users and not just `root` should read these.
# ls -l /usr/share/doc/vmm/examples/postfix/
total 32
-rw-r--r-- 1 root root 426 Jun 28 2012 pgsql-relocated_maps.cf
-rw-r--r-- 1 root root 585 Jun 28 2012 pgsql-smtpd_sender_login_maps.cf
-rw-r--r-- 1 root root 424 Jun 28 2012 pgsql-transport_maps.cf
-rw-r--r-- 1 root root 430 Jun 28 2012 pgsql-virtual_alias_maps.cf
-rw-r--r-- 1 root root 418 Jun 28 2012 pgsql-virtual_gid_maps.cf
-rw-r--r-- 1 root root 418 Jun 28 2012 pgsql-virtual_mailbox_domains.cf
-rw-r--r-- 1 root root 428 Jun 28 2012 pgsql-virtual_mailbox_maps.cf
-rw-r--r-- 1 root root 420 Jun 28 2012 pgsql-virtual_uid_maps.cf
As most users probably just copy these files to `postconf -h
config_directory`, mostly `/etc/postfix`, the password for the database
would be readable by users. Therefore it would be nice to add a note
about that, as vmm’s script `install.sh` probably sets the correct
permissions [1].
Thanks,
Paul
[1] http://vmm.localdomain.org/installation/install_vmm.html#pgsql-cf-files
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: i386 (i686)
Kernel: Linux 3.10-3-686-pae (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
signature.asc
Description: This is a digitally signed message part
