Your message dated Mon, 13 Jun 2016 18:25:36 +0000
with message-id <[email protected]>
and subject line Bug#824878: fixed in targetcli 1:3.0~pre4.1~ga55d018-3
has caused the Debian Bug report #824878,
regarding targetcli: Sensitive information exposed in configuration and backup
files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
824878: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824878
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: targetcli
Version: 1:3.0~pre4.1~ga55d018-2
Severity: normal
Dear Maintainer,
the configuration file /etc/target/scsi_target.lio as well as backups in
/var/target/ are created with permissions 644 (also depending on root's umask,
of course). These files contain the clear text password(s) for
target/initiator (mutual) authentication. Please, adjust the defaults, so
these files will never be world readable, independent of root's umask setting.
Thanks!
Ch. Scheurer
-- System Information:
Debian Release: 8.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages targetcli depends on:
ii python 2.7.9-1
ii python-configshell 1.6.1~g020d540-2
ii python-rtslib 1:3.0~pre4.1~g1b33ceb-2
targetcli recommends no packages.
targetcli suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: targetcli
Source-Version: 1:3.0~pre4.1~ga55d018-3
We believe that the bug you reported is fixed in the latest version of
targetcli, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ritesh Raj Sarraf <[email protected]> (supplier of updated targetcli package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 13 Jun 2016 18:37:54 +0530
Source: targetcli
Binary: targetcli
Architecture: source all
Version: 1:3.0~pre4.1~ga55d018-3
Distribution: unstable
Urgency: medium
Maintainer: Ritesh Raj Sarraf <[email protected]>
Changed-By: Ritesh Raj Sarraf <[email protected]>
Description:
targetcli - administration tool for managing LIO core target
Closes: 824878
Changes:
targetcli (1:3.0~pre4.1~ga55d018-3) unstable; urgency=medium
.
* [7ea95e3] Fix (un)loading of kernel modules
* [a9b9106] Fix Vcs and Homepage URLs
* [2dbdc41] Add dh-python to build-deps
* [7b2d846] Secure directory permissions to safeguard sensitive
information. Thanks to Christoph Scheurer (Closes: #824878)
Checksums-Sha1:
7e154cad33531d2e809a1a5ddc0c0510ebd06dab 2047
targetcli_3.0~pre4.1~ga55d018-3.dsc
ebcbd76772119970f01538ca403d5732126cf4d4 6456
targetcli_3.0~pre4.1~ga55d018-3.debian.tar.xz
c6928dbce0fe46cebb93ca22853b36fcc0a5d4d2 35492
targetcli_3.0~pre4.1~ga55d018-3_all.deb
Checksums-Sha256:
f270a691fd21fc7a2f4f1797241c06db9a8c827d2be3b0054187136b8fcc4084 2047
targetcli_3.0~pre4.1~ga55d018-3.dsc
0cec689343e377739fdbce4f0f3fc663f7846141a20f978bdb11db7474b13929 6456
targetcli_3.0~pre4.1~ga55d018-3.debian.tar.xz
7d56e0c3c21458fd0134e0c4874341073eb8bc864ee018739ece8a9285fea85c 35492
targetcli_3.0~pre4.1~ga55d018-3_all.deb
Files:
baacedf912974e03f3f14468db271cd2 2047 net optional
targetcli_3.0~pre4.1~ga55d018-3.dsc
63c3ca8042fc7ca3e0170f776b5f313d 6456 net optional
targetcli_3.0~pre4.1~ga55d018-3.debian.tar.xz
68354b160ce754f47d0f4f6bd29b2611 35492 net optional
targetcli_3.0~pre4.1~ga55d018-3_all.deb
-----BEGIN PGP SIGNATURE-----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=V12h
-----END PGP SIGNATURE-----
--- End Message ---
