Red Hat Bugzilla – Bug 1265710
[RFE] tdb files in /var/lib/samba are world-readable [-rw-r--r--.]
Last modified: 2015-09-24 04:06:38 EDT
Description of problem: tdb files in /var/lib/samba are world-readable [-rw-r--r--.] Version-Release number of selected component (if applicable): How reproducible:Always. Steps to Reproduce: 1. Install IPA server on RHEL7.2 2. Navigate to /var/lib/samba directory Actual results: Some of the .tdb files are world-readable, which shouldn't be if it isn't really required. -rw-r--r--. 1 root root 40200 Sep 23 19:22 brlock.tdb -rw-r--r--. 1 root root 20480 Sep 23 19:28 gencache_notrans.tdb -rw-r--r--. 1 root root 430080 Sep 23 19:26 gencache.tdb -rw-r--r--. 1 root root 696 Sep 23 19:22 leases.tdb -rw-r--r--. 1 root root 40200 Sep 23 19:22 locking.tdb -rw-r--r--. 1 root root 696 Sep 23 19:22 notify_index.tdb -rw-r--r--. 1 root root 696 Sep 23 19:22 notify.tdb -rw-r--r--. 1 root root 8192 Sep 23 19:28 serverid.tdb Expected results: .tdb file permissions should be consistent with other files in the directory i.e 640 and should be 644 only if required. Additional info:
Alexander, please help us assess this one.
These files have to be world readable or smbd processes running under specific users wouldn't be able to coordinate locking, for example. This bug is nonsense.