Your message dated Tue, 17 Aug 2010 21:45:20 +0200
with message-id <[email protected]>
and subject line Re: Bug#593120: /var/lib/rkhunter/tmp/ should not be group
readable
has caused the Debian Bug report #593120,
regarding /var/lib/rkhunter/tmp/ should not be group readable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
593120: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593120
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rkhunter
Version: 1.3.6-4
Severity: wishlist
Hi.
As already suggested by the rkhunter documentation, the tmp-dir
/var/lib/rkhunter/tmp/ should have tight permissions.
group-rights should be removed even for the root group IMO.
As sysadmins may have deliberately removed this for some files copied there.
Cheers,
Chris.
--- End Message ---
--- Begin Message ---
Le mardi 17 août 2010 à 15:06:56 (+0200), Julien Valroff a écrit :
> Date: Tue, 17 Aug 2010 15:06:56 +0200
> From: Julien Valroff <[email protected]>
> To: Christoph Anton Mitterer <[email protected]>,
> [email protected]
> Cc: Debian Bug Tracking System <[email protected]>
> Subject: Re: Bug#593120: /var/lib/rkhunter/tmp/ should not be group
> readable
> Reply-To: [email protected]
>
> Le dimanche 15 août 2010 à 18:06:14 (+0200), Christoph Anton Mitterer a écrit
> :
> > Date: Sun, 15 Aug 2010 18:06:14 +0200
> > From: Christoph Anton Mitterer <[email protected]>
> > To: Debian Bug Tracking System <[email protected]>
> > Subject: Bug#593120: /var/lib/rkhunter/tmp/ should not be group readable
> > Reply-To: Christoph Anton Mitterer <[email protected]>,
> > [email protected]
> >
> > Package: rkhunter
> > Version: 1.3.6-4
> > Severity: wishlist
> >
> >
> > Hi.
>
> Hi,
>
> > As already suggested by the rkhunter documentation, the tmp-dir
> > /var/lib/rkhunter/tmp/ should have tight permissions.
>
> The tmp directory keeps the default rights defined by upstream.
>
> > group-rights should be removed even for the root group IMO.
> > As sysadmins may have deliberately removed this for some files copied there.
>
> You are right, though I would then better check that the files are copied to
> this
> directory using either 'cp -p' or 'cp -a', what do you think?
>
> This is already the case for the passwd and group files which are dealt with
> in
> the postinst script.
I have checked this carefully, and I confirm rkhunter uses "cp -f -p" to copy
files
to the tmp directory.
I hence close this bug report, feel free to re-open it in case you disagree.
Cheers,
Julien
--
Julien Valroff <[email protected]>
http://www.kirya.net
GPG key: 4096R/290D20C5
092F 4CB5 5F19 E006 1CFD B489 D32B 8D66 290D 20C5
--- End Message ---
