• Bug#265696: directoryassistant: world readable user config file

    From Hereward Cooper@1:229/2 to All on Sat Aug 14 16:00:10 2004
    From: [email protected]

    Package: directoryassistant
    Version: 1.2-1
    Severity: normal
    Tags: security

    The default config made by directoryassistant (~/.directoryassistant) is world readable.
    Isn't this a bit of a security risk since it contains the users password to access the LDAP server?

    Thanks,

    Coops



    -- System Information:
    Debian Release: 3.1
    APT prefers testing
    APT policy: (700, 'testing'), (600, 'unstable')
    Architecture: i386 (i686)
    Kernel: Linux 2.6.6-2-k7-smp
    Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8

    Versions of packages directoryassistant depends on:
    ii python 2.3.4-1 An interactive high-level object-o ii python-gtk2 2.2.0-2 Python bindings for the GTK+ widge ii python-ldap 2.0.1-1 A LDAP interface module for Python

    -- no debconf information


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)