Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 80636 - quagga-0.97.2 permission problem in /etc
Summary: quagga-0.97.2 permission problem in /etc
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: x86 Linux
: High minor (vote)
Assignee: Amir Guindehi (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-02-03 14:04 UTC by Jean-David Silberzahn
Modified: 2011-03-12 18:46 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jean-David Silberzahn 2005-02-03 14:04:40 UTC 
Directory /etc/quagga has mode 755 and is owned by root:root.
This directory can contain clear text password, and must be writable by the user quagga (to enable write from vtysh lines).

Reproducible: Always
Steps to Reproduce:

Actual Results:  
Some functionnality of quagga are missing, and this coud lead to potential
security breach

Expected Results:  
/etc/quagga should have permissions like 700 (?) and be owned by quagga:quagga
Comment 1 Amir Guindehi (RETIRED) gentoo-dev 2005-02-04 01:17:27 UTC 
True. 

The permissions are set so especially to hinder saves from the (insecure) VTY by default.
Comment 2 Amir Guindehi (RETIRED) gentoo-dev 2005-03-24 14:05:36 UTC 
The ebuild quagga-0.98.2 fixes this problem.