Skip to content

Commit

Permalink
Fix a problem with security relevant file rights
Browse files Browse the repository at this point in the history
The file /etc/nullmailer/remotes is a file where also password could be
configured. Therefore the original file is owned by mail and only
readable by user mail.

If there is a global setting for owner and mode as defaults for file as
it is very common, this would leak the data to the world. Setting that
explicit for the file fixes this issue.
  • Loading branch information
mowgli committed Apr 6, 2013
1 parent 7e48f6d commit 031139b
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions manifests/config.pp
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,9 @@
content => "$nullmailer::remoterelay smtp $nullmailer::remoteopts\n",
require => Class['nullmailer::package'],
notify => Class['nullmailer::service'],
owner => 'mail',
group => 'mail',
mode => 0600,
}

if ($nullmailer::adminaddr == '') {
Expand Down

0 comments on commit 031139b

Please sign in to comment.