Re: Starting radius issue - configuration files globaly readable.

2007-02-09 Thread Peter Nixon
On Thu 08 Feb 2007 13:58, Alan DeKok wrote: tzieleniewski wrote: Hi! I have just compiled the latest CVS and whenever I try to start radius I get the following info: Configuration file /home/radius/freeradius/raddb/radiusd.conf is globally readable. This is because I use the

Re: Starting radius issue - configuration files globaly readable.

2007-02-09 Thread Alan DeKok
Peter Nixon wrote: I have to say that this caught me out also when I upgraded one of my radius servers yesterday. My spec files had radiusd.conf as world readable, but clients.conf and sql.conf etc (everything with passwords in them) as only radiusd group readable. Next time you make a

Re: Starting radius issue - configuration files globaly readable.

2007-02-09 Thread A . L . M . Buxey
Hi, I'm going to update the checks to make them a little less restrictive. ${raddb} should be o-rwx. Any files within ${raddb} can have any permission they want. so long as it handles symlinks/chroot okay :-) alan - List info/subscribe/unsubscribe? See

Re: Starting radius issue - configuration files globaly readable.

2007-02-09 Thread Peter Nixon
On Fri 09 Feb 2007 12:25, Alan DeKok wrote: Peter Nixon wrote: I have to say that this caught me out also when I upgraded one of my radius servers yesterday. My spec files had radiusd.conf as world readable, but clients.conf and sql.conf etc (everything with passwords in them) as only

Re: Starting radius issue - configuration files globaly readable.

2007-02-09 Thread Alan DeKok
Peter Nixon wrote: 0750 for the dirs and 0640 for the files is a pretty reasonable set of permissions in my opinion... Yes. I'll poke the Makefiles so that when the server is built, the local files have the correct permissions before installation. That will help, too. Alan DeKok. --

Starting radius issue - configuration files globaly readable.

2007-02-08 Thread tzieleniewski
Hi! I have just compiled the latest CVS and whenever I try to start radius I get the following info: Configuration file /home/radius/freeradius/raddb/radiusd.conf is globally readable. This is because I use the symbolic links to files. Can this restriction be somehow removed?? Bests -tomasz

Re: Starting radius issue - configuration files globaly readable.

2007-02-08 Thread Alan DeKok
tzieleniewski wrote: Hi! I have just compiled the latest CVS and whenever I try to start radius I get the following info: Configuration file /home/radius/freeradius/raddb/radiusd.conf is globally readable. This is because I use the symbolic links to files. Can this restriction be