Bug#527476: prewikka: password file world-readable

2009-05-08 Thread Michael S. Gilbert
On Fri, 8 May 2009 10:46:16 +0200 Pierre Chifflier wrote: > While I appreciate the effort of checking security related things, I'll > just point out that the verification was fairly trivial: thanks for the info. i've found that it is often more effective to defer to the expertise of the maintaine

Bug#527476: prewikka: password file world-readable

2009-05-08 Thread Pierre Chifflier
On Thu, May 07, 2009 at 04:03:05PM -0400, Michael S. Gilbert wrote: > Package: prewikka > Severity: important > Tags: security > > Hi, > > Redhat recently issued security updates for prewikka [0] because the > password file is world readable. The text of the issue is: > > | The permissions on t

Bug#527476: prewikka: password file world-readable

2009-05-07 Thread Michael S. Gilbert
Package: prewikka Severity: important Tags: security Hi, Redhat recently issued security updates for prewikka [0] because the password file is world readable. The text of the issue is: | The permissions on the prewikka.conf file are world readable and contain the sql | database password used b