Public bug reported:

Binary package hint: initscripts


The permissions of the files in /etc/init.d are 0755 rather than what they 
should be (0754 or 0750).

I can think of no reason why a user who isn't root and doesn't belong to
the root group should be able to read the init scripts, let alone
execute them.  I understand that if such a user attempts to execute the
script, nothing will really happen.  Still though, the read and execute
permissions are not necessary at all, and should be removed, if only for
error control alone.

An unprivileged user should be informed that they do not have permission
to execute any script in /etc/init.d.

This doesn't happen with the current script permissions.

Again, unprivileged users should be always be informed when they have
failed at an attempt to perform an action or task reserved for root or
members of the group owning a file.


Thank you!

May the almighty unseen power of the universe cast greatness upon Ubuntu
and Linux!

-Dan Gregory

** Affects: sysvinit (Ubuntu)
     Importance: Undecided
         Status: Unconfirmed

-- 
Init scripts have permissions 0755 instead of 0754 or 0750
https://launchpad.net/bugs/68781

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to