Bug 692254

Summary:	/etc/crypttab is world readable
Product:	[Fedora] Fedora	Reporter:	David Zeuthen <davidz>
Component:	anaconda	Assignee:	Anaconda Maintenance Team <anaconda-maint-list>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	15	CC:	anaconda-maint-list, jonathan, mclasen, notting, vanmeeuwen+fedora
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	anaconda-15.27-1.fc15	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-04-09 02:11:28 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	617261

Description David Zeuthen 2011-03-30 20:11:30 UTC

<davidz> notting: hi - is it intentional that /etc/crypttab is world-readable?
<notting> davidz: hah. probably shouldn't be.
<notting> davidz: anaconda creates that when necessary, please file there
<davidz> notting: we don't currently put passwords in it, but it's definitely sending the wrong signal that it's world readable
 notting: I'll file

Comment 1 David Zeuthen 2011-03-30 20:18:00 UTC

Btw, I think initscripts can also be blamed

 http://pkgs.fedoraproject.org/gitweb/?p=initscripts.git;a=blob;f=initscripts.spec;h=5eca359016fbdb51fff89e208d65d61089102aa3;hb=HEAD#l126

since it does 'touch $RPM_BUILD_ROOT/etc/crypttab' at the end of %install. Bill?

Comment 2 Bill Nottingham 2011-03-30 20:21:20 UTC

initscripts is fixed in git. But it's just a %ghost file there; it's not laid down.

Comment 3 Fedora Update System 2011-04-06 20:31:30 UTC

anaconda-15.27-1.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/anaconda-15.27-1.fc15

Comment 4 Fedora Update System 2011-04-07 02:20:38 UTC

Package anaconda-15.27-1.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing anaconda-15.27-1.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/anaconda-15.27-1.fc15
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2011-04-09 02:11:21 UTC

anaconda-15.27-1.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.