[Bug 1588391] Re: ceilometer charm creates world-readable /etc/ceilometer/ceilometer.conf, exposing credentials
Chuck Short
chuck.short at canonical.com
Fri Feb 3 16:09:58 UTC 2017
Set to 0700 as the other packages.
** Also affects: ceilometer (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ceilometer in Ubuntu.
https://bugs.launchpad.net/bugs/1588391
Title:
ceilometer charm creates world-readable
/etc/ceilometer/ceilometer.conf, exposing credentials
Status in ceilometer package in Ubuntu:
New
Status in ceilometer package in Juju Charms Collection:
Confirmed
Bug description:
On a newly-installed system using ceilometer from the charm store,
/etc/ceilometer/ceilometer.conf is world-readable, despite holding a
number of important credentials:
ubuntu at juju-machine-131-lxc-2:/etc/ceilometer$ ls -la /etc/ceilometer/ceilometer.conf
-rw-r--r-- 1 ceilometer ceilometer 1140 Jun 2 14:12 /etc/ceilometer/ceilometer.conf
Permissions should be changed to 0640 at a maximum.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceilometer/+bug/1588391/+subscriptions
More information about the Ubuntu-openstack-bugs
mailing list