Bug 845336 - /var/run/tuned/tuned.pid created with insecure permissions
Summary: /var/run/tuned/tuned.pid created with insecure permissions
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: tuned
Version: 6.3
Hardware: All
OS: Linux
low
low
Target Milestone: rc
: ---
Assignee: Jan Vcelak
QA Contact: qe-baseos-daemons
URL:
Whiteboard:
Depends On:
Blocks: CVE-2012-6136
TreeView+ depends on / blocked
 
Reported: 2012-08-02 17:25 UTC by Aron Parsons
Modified: 2022-09-05 10:33 UTC (History)
3 users (show)

Fixed In Version: tuned-0.2.19-8.el6
Doc Type: Bug Fix
Doc Text:
Cause: tuned service started Consequence: tuned PID file is crated with world-writable permissions Fix: applied patch to create the file with secure permissions Result: tuned PID file is not world-writable
Clone Of:
Environment:
Last Closed: 2013-02-21 10:05:13 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2013:0386 0 normal SHIPPED_LIVE tuned bug fix update 2013-02-20 20:51:53 UTC

Description Aron Parsons 2012-08-02 17:25:17 UTC
Description of problem:
tuned's PID file is created with insecure permissions.  /usr/sbin/tuned explicitly sets its umask to 0; it should either not do this and inherit the umask from its init script or set it to something sane, like 022. 

Version-Release number of selected component (if applicable):
tuned-0.2.19-7.el6.noarch

How reproducible:
always

Steps to Reproduce:
1. yum -y install tuned
2. service tuned start
3. ls -l /var/run/tuned/tuned.pid
  
Actual results:
666

Expected results:
644

Comment 2 RHEL Program Management 2012-09-14 16:10:50 UTC
This request was evaluated by Red Hat Product Management for
inclusion in a Red Hat Enterprise Linux release.  Product
Management has requested further review of this request by
Red Hat Engineering, for potential inclusion in a Red Hat
Enterprise Linux release for currently deployed products.
This request is not yet committed for inclusion in a release.

Comment 5 Jan Vcelak 2012-09-27 14:32:19 UTC
Resolved in tuned-0.2.19-8.el6

Comment 9 errata-xmlrpc 2013-02-21 10:05:13 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-0386.html


Note You need to log in before you can comment on or make changes to this bug.