Public bug reported:

Binary package hint: bacula-fd

While the hostname is being substituted in bacula-fd.conf, the default
director passwords are the same on all installations. The sample
passwords "look" random and there is no notice in the file that the
passwords should be changed to result in a secure installation. In fact,
the comments in the file even state:

# There is not much to change here except perhaps the
# File daemon Name to

The postinst script should either generate a random password or there
should be a comment in the file indicating that the default password is
insecure.

** Affects: bacula (Ubuntu)
     Importance: Undecided
         Status: New

-- 
password in bacula-fd.conf is not auto-generated
https://bugs.launchpad.net/bugs/222558
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bacula in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to