Bug 30819 – UCC auto-join information in the image are world-readable

Bug 30819 - UCC auto-join information in the image are world-readable


Summary:	UCC auto-join information in the image are world-readable

Status:	CLOSED FIXED

Product:	Z_Univention Corporate Client (UCC)
Classification:	Unclassified
Component:	Image management
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 normal
Target Milestone:	UCC 1.0-errata
Assigned To:	Erik Damrose
QA Contact:	Felix Botner

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2013-03-19 10:20 CET by Felix Botner
Modified:	2013-07-25 12:59 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Felix Botner

2013-03-19 10:20:17 CET

-> ucc-image-set-join-information -i ucc-1.0-thinclient-image.img

-> mount -o loop ucc-1.0-thincli...

-> ls -la /mnt/etc/ucc_join_*
-rw-r--r-- 1 root root  9 19. Mär 09:58 /mnt/etc/ucc_join_domain
-rw-r--r-- 1 root root 11 19. Mär 09:58 /mnt/etc/ucc_join_password
-rw-r--r-- 1 root root 14 19. Mär 09:58 /mnt/etc/ucc_join_user

Until the system is joined or on live systems, the auto-join information are readable for everybody. "ucc-image-set-join-information" should chmod these files to 440.

Comment 1 Erik Damrose

2013-04-02 14:06:17 CEST

The permissions are now more restrictive in 
ucc-image-toolkit 1.0.7-1

Comment 2 Felix Botner

2013-04-08 09:34:23 CEST

OK ucc-errata

-> ucc-image-set-join-information -i ucc-1.0-thinclient-image.img
...

-> mount -o loop ucc-1.0-thinclient-image.img /mnt/
-> ls -la /mnt/etc/ucc_join_*
-r--r----- 1 root root  8  5. Apr 09:07 /mnt/etc/ucc_join_domain
-r--r----- 1 root root 11  5. Apr 09:07 /mnt/etc/ucc_join_password
-r--r----- 1 root root 14  5. Apr 09:07 /mnt/etc/ucc_join_user

automatic join still works

OK YAML

Comment 3 Moritz Muehlenhoff

2013-07-25 12:59:47 CEST

Released in the App center in "ucc_20130429"