kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #144089
[Bug 1397652] Re: /dev/random and /dev/urandom world writeable
This bug was fixed in the package manpages - 4.02-0ubuntu1
---------------
manpages (4.02-0ubuntu1) xenial; urgency=medium
* New upstream version, including those changes:
- random.4: Fix permissions shown for the devices (lp: #1397652)
- resolv.conf.5: Document RES_SNGLKUPREOP (lp: #1110781)
- proc.5: Document /proc/PID/status VmPin field (lp: #1071746)
* debian/rules:
- don't ship attr manpage to avoid conflict with that package
-- Sebastien Bacher <seb128@xxxxxxxxxx> Wed, 04 Nov 2015 16:05:28
+0100
** Changed in: manpages (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1397652
Title:
/dev/random and /dev/urandom world writeable
Status in linux package in Ubuntu:
Invalid
Status in manpages package in Ubuntu:
Fix Released
Bug description:
It looks like in 14.04.1 that /dev/random and /dev/urandom are world-
writeable. This occurs in at least 14.04.1 Desktop for AMD64 and
Server for i386
$ ls -l /dev/*random
crw-rw-rw- 1 root root 1, 8 Nov 25 10:44 /dev/random
crw-rw-rw- 1 root root 1, 9 Nov 25 10:44 /dev/urandom
As far as I know, they should be 664 or 644.
ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: base-files 7.2ubuntu5.1
ProcVersionSignature: Ubuntu 3.13.0-40.69-generic 3.13.11.10
Uname: Linux 3.13.0-40-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.5
Architecture: amd64
CurrentDesktop: Unity
Date: Sun Nov 30 12:06:43 2014
Dependencies:
InstallationDate: Installed on 2014-10-26 (34 days ago)
InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
SourcePackage: base-files
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1397652/+subscriptions