[DebianGIS-dev] Bug#572032: world readable file ~/.josm/preferences contains password in plaintext

David Paleino dapal at debian.org
Mon Mar 1 17:20:22 UTC 2010


tags 572032 confirmed
thanks

Hello,

On Monday 01 March 2010 07:44:50, Jonas Stein wrote:
> Package: josm
> Version: 0.0.svn2255-1
> Justification: Policy 10.9
> Severity: serious
> 
> ls -al ~/.josm/preferences
> returns -rw-r--r--
> 
> The problem with the plaintext password is nothing new.
> But it is dangerous and could be avoided.
> Josm should at least chmod 700 this file.

I'm confirming this bug, will solve it ASAP.

Kindly,
David

-- 
 . ''`.   Debian developer | http://wiki.debian.org/DavidPaleino
 : :'  : Linuxer #334216 --|-- http://www.hanskalabs.net/
 `. `'`  GPG: 1392B174 ----|----
   `-   2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-grass-devel/attachments/20100301/51fabe76/attachment.pgp>


More information about the Pkg-grass-devel mailing list