CoffeeITWorks / ansible_burp2_server

Ansible role to deploy burp2 server
MIT License
10 stars 9 forks source link

Wrong permission set by task "unpriv_user | Ensure /etc dir has permissions" #66

Closed marcin-github closed 4 years ago

marcin-github commented 4 years ago

Hola! Mentioned task sets insecure permissons to /etc/burp and files under the dir. Files should not have executable bit set. Also I think that correct owner for all this files and directories is root beside a couple of files which should be writeable by burp process (ssl cert stuff). Non root processes shouldn't have possibility to modify files under /etc, usually :)