90_dpkg_maas.cfg is world readable
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cloud-init (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
$ ls -l /etc/cloud/
-rw-r--r-- 1 root root 297 Mar 14 04:58 /etc/cloud/
after dpkg installation the 90_dpkg_maas.cfg file is world readable.
that file will have credentials in it.
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: cloud-init 0.6.3~bzr539-
ProcVersionSign
Uname: Linux 3.2.0-18-virtual x86_64
ApportVersion: 1.94.1-0ubuntu2
Architecture: amd64
Date: Wed Mar 14 05:03:05 2012
Ec2AMI: ami-00000000
Ec2AMIManifest: FIXME
Ec2Availability
Ec2InstanceType: m1.tiny
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
PackageArchitec
ProcEnviron:
TERM=screen
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: cloud-init
UpgradeStatus: No upgrade log present (probably fresh install)
This bug was fixed in the package cloud-init - 0.6.3~bzr539- 0ubuntu3
--------------- bzr539- 0ubuntu3) precise; urgency=low
cloud-init (0.6.3~
* make maas config file only readable by root (LP: #954721)
-- Scott Moser <email address hidden> Wed, 14 Mar 2012 01:19:32 -0400