[Bug 1066935] [NEW] named.conf.rndc.maas is insecure by default

Launchpad Bug Tracker 1066935 at bugs.launchpad.net
Fri Oct 19 15:47:19 UTC 2012


You have been subscribed to a public bug:

After default installation the following permissions are applied:

-rw-r--r-- 1 maas root 193 Oct 15 14:37
/etc/bind/maas/named.conf.rndc.maas

This makes the bind communication key readable to all users of the
system

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: maas-dns 0.1+bzr1264+dfsg-0ubuntu1
ProcVersionSignature: Ubuntu 3.5.0-17.28-generic 3.5.5
Uname: Linux 3.5.0-17-generic i686
ApportVersion: 2.6.1-0ubuntu3
Architecture: i386
Date: Mon Oct 15 17:10:58 2012
InstallationMedia: Ubuntu-Server 12.10 "Quantal Quetzal" - Release i386 (20121014)
PackageArchitecture: all
ProcEnviron:
 LANGUAGE=en_US:en
 TERM=xterm-256color
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: maas
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: maas (Ubuntu)
     Importance: Critical
         Status: In Progress


** Tags: apport-bug i386 quantal
-- 
named.conf.rndc.maas is insecure by default
https://bugs.launchpad.net/bugs/1066935
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to maas in Ubuntu.



More information about the Ubuntu-server-bugs mailing list