NethServer / dev

NethServer issue tracker
https://github.com/NethServer/dev/issues
62 stars 20 forks source link

mariadb: password secrets file are 755 #6949

Closed stephdl closed 3 months ago

stephdl commented 3 months ago

Steps to reproduce

Expected behavior

users cannot browse files of other users but I expect permission more restrictive for this secrets file

Actual behavior

I have a 755 permissions on /home/mariadb2/.config/state/secrets/passwords.secret, however mariadb1 is not able to browse file of another unix user mariadb2

[mariadb1@R3 state]$ cat /home/mariadb2/.config/state/secrets/passwords.secret 
cat: /home/mariadb2/.config/state/secrets/passwords.secret: Permission denied

Components

ns8-mariadb 1.0.8

stephdl commented 3 months ago

QA

test case 1 install ns8-mariadb 1.0.9-dev.2 check permission of ~.config/state/secrets/passwords.secret it should be 400

test case 2 upgrade ns8-mariadb 1.0.9-dev.2 check permission of ~.config/state/secrets/passwords.secret it should be 400

stephdl commented 3 months ago

verified and released ghcr.io/nethserver/mariadb:1.0.9