[Trac-bugs] [PC-BSD Trac] #720: Permissions on pc-activedirectory.conf allow users to view domain admin password

PC-BSD trac at pcbsd.org
Thu May 9 09:22:56 PDT 2013


#720: Permissions on pc-activedirectory.conf allow users to view domain admin
password
-------------------------+----------------------------------
 Reporter:  xenophonf    |       Type:  System Defect
   Status:  new          |   Priority:  major
Milestone:               |  Component:  System Configuration
  Version:  9.1-RELEASE  |   Keywords:
-------------------------+----------------------------------
 /usr/local/etc/pc-activedirectory.conf should have permissions 0400,
 instead of 0444.  Otherwise, unprivileged users will be able to view the
 username and password of the account used to join the PC-BSD system to the
 domain.

-- 
Ticket URL: <http://trac.pcbsd.org/ticket/720>
PC-BSD <http://trac.pcbsd.org>
PC-BSD Project Management


More information about the Trac-bugs mailing list