Bug 558343

Summary: Possibly insecure server configuration file permissions
Product: [Fedora] Fedora Reporter: Daniel Qarras <dqarras>
Component: krb5Assignee: Nalin Dahyabhai <nalin>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: nalin
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: 1.7-23.fc13 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-01-25 11:58:40 EST Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Daniel Qarras 2010-01-24 19:50:05 EST
Description of problem:
Permissions for kdc.conf and kadm.acl are 644 but since they contain somewhat sensitive data (esp. kadm.acl) I wonder wouldn't 600 would be more secure permissions?

Comment 1 Nalin Dahyabhai 2010-01-25 11:37:40 EST
You're not really supposed to let non-admins roam around on a KDC, but I don't see a lot of downside to making that change.