nagios-charmers team mailing list archive

[Junien Fridrick <1811997@xxxxxxxxxxxxxxxxxx>]

** Changed in: nagios-charm
   Importance: Undecided => Critical

** Changed in: nagios-charm
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Nagios
Charm developers, which is subscribed to Nagios Charm.
https://bugs.launchpad.net/bugs/1811997

Title:
  Password(s) stored on file(s) readable by anyone

Status in Nagios Charm:
  Triaged

Bug description:
  update_password write a file with default perms (generally, 644). Password should be stored on a file with perms 0400.
  """
  nagios-1:~$ ls -l /var/lib/juju/nagios.*
  -rw-r--r-- 1 root root 12 Nov 21 15:26 /var/lib/juju/nagios.nagiosadmin.passwd
  -rw-r--r-- 1 root root 12 Nov 21 15:26 /var/lib/juju/nagios.nagiosro.passwd
  -r-------- 1 root root 11 Aug  2 22:53 /var/lib/juju/nagios.passwd
  """

  https://git.launchpad.net/nagios-charm/tree/hooks/upgrade-charm#n332

To manage notifications about this bug go to:
https://bugs.launchpad.net/nagios-charm/+bug/1811997/+subscriptions