← Back to team overview

touch-packages team mailing list archive

[Bug 1397652] [NEW] /dev/random and /dev/urandom world writeable

 

Public bug reported:

It looks like in 14.04.1 that /dev/random and /dev/urandom are world-
writeable.  This occurs in at least 14.04.1 Desktop for AMD64 and Server
for i386

$ ls -l /dev/*random 
crw-rw-rw- 1 root root 1, 8 Nov 25 10:44 /dev/random
crw-rw-rw- 1 root root 1, 9 Nov 25 10:44 /dev/urandom

As far as I know, they should be 664 or 644.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: base-files 7.2ubuntu5.1
ProcVersionSignature: Ubuntu 3.13.0-40.69-generic 3.13.11.10
Uname: Linux 3.13.0-40-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.5
Architecture: amd64
CurrentDesktop: Unity
Date: Sun Nov 30 12:06:43 2014
Dependencies:
 
InstallationDate: Installed on 2014-10-26 (34 days ago)
InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
SourcePackage: base-files
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: base-files (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug trusty

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to base-files in Ubuntu.
https://bugs.launchpad.net/bugs/1397652

Title:
  /dev/random and /dev/urandom world writeable

Status in base-files package in Ubuntu:
  New

Bug description:
  It looks like in 14.04.1 that /dev/random and /dev/urandom are world-
  writeable.  This occurs in at least 14.04.1 Desktop for AMD64 and
  Server for i386

  $ ls -l /dev/*random 
  crw-rw-rw- 1 root root 1, 8 Nov 25 10:44 /dev/random
  crw-rw-rw- 1 root root 1, 9 Nov 25 10:44 /dev/urandom

  As far as I know, they should be 664 or 644.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: base-files 7.2ubuntu5.1
  ProcVersionSignature: Ubuntu 3.13.0-40.69-generic 3.13.11.10
  Uname: Linux 3.13.0-40-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.5
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Nov 30 12:06:43 2014
  Dependencies:
   
  InstallationDate: Installed on 2014-10-26 (34 days ago)
  InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
  SourcePackage: base-files
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1397652/+subscriptions


Follow ups

References