498216 – app-office/openerp - openerp.cfg permissions are insecure

Bug 498216 - app-office/openerp - openerp.cfg permissions are insecure

Summary: app-office/openerp - openerp.cfg permissions are insecure

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Patrick Lauer

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2014-01-16 02:19 UTC by A. Person
Modified:	2014-01-25 14:25 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description A. Person 2014-01-16 02:19:51 UTC

app-office/openerp has file /etc/openerp/openerp.cfg which is world-readable but the postgresql database password has to be entered there in plan text.

Reproducible: Always

Comment 1 Yixun Lan archtester

2014-01-25 14:25:39 UTC

fixed in latest revision (openerp-7.0.20140125, openerp-8.0.20140125).
change owner of /etc/openerp to openerp:openerp, and permission to 0640.

thanks for reporting this.