Your message dated Tue, 24 Mar 2009 13:46:09 +0100
with message-id <[email protected]>
and subject line Re: Bug#521018: Please, chmod 640
/etc/munin/plugin-conf.d/munin-node
has caused the Debian Bug report #521018,
regarding Please, chmod 640 /etc/munin/plugin-conf.d/munin-node
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
521018: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521018
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: munin-node
Version: 1.2.6-9
Severity: normal
Hello,
Has explain at http://munin.projects.linpro.no/wiki/Using_SNMP_plugins,
/etc/munin/plugin-conf.d/munin-node might contain snmp communities.
Having this file 644 is a security leak, 640 seems more sane.
Thanks.
@+,
Fab
-- System Information:
Debian Release: 5.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages munin-node depends on:
ii adduser 3.110 add and remove users and groups
ii gawk 1:3.1.5.dfsg-4.1 GNU awk, a pattern scanning and pr
ii libnet-server-perl 0.97-1 An extensible, general perl server
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii perl 5.10.0-19 Larry Wall's Practical Extraction
ii procps 1:3.2.7-11 /proc file system utilities
Versions of packages munin-node recommends:
ii libnet-snmp-perl 5.2.0-1 Script SNMP connections
Versions of packages munin-node suggests:
ii ethtool 6+20080913-1 display or change Ethernet device
pn libdbd-pg-perl <none> (no description available)
pn liblwp-useragent-determined <none> (no description available)
pn libnet-irc-perl <none> (no description available)
ii libwww-perl 5.813-1 WWW client/server library for Perl
ii lm-sensors 1:3.0.2-1+b2 utilities to read temperature/volt
ii munin 1.2.6-9 network-wide graphing framework (g
pn munin-plugins-extra <none> (no description available)
pn mysql-client <none> (no description available)
ii python 2.5.2-3 An interactive high-level object-o
ii smartmontools 5.38-2 control and monitor storage system
-- no debconf information
--- End Message ---
--- Begin Message ---
tags 521018 + wontfix
thanks
On Tue, Mar 24, 2009 at 12:51:08PM +0100, Fabrice LORRAIN wrote:
>
> Has explain at http://munin.projects.linpro.no/wiki/Using_SNMP_plugins,
> /etc/munin/plugin-conf.d/munin-node might contain snmp communities.
>
> Having this file 644 is a security leak, 640 seems more sane.
I would recommend that you add a new file to /etc/munin/plugin-conf.d/ instead,
and use stricter permissions on that file. That way, you won't have to deal
with changed configuration files for every upgrade.
I've updated http://munin.projects.linpro.no/wiki/Using_SNMP_plugins as well.
--
Stig Sandbeck Mathisen
signature.asc
Description: Digital signature
--- End Message ---
