[Pkg-nagios-devel] Bug#683879: pnp4nagios-bin: process_perfdata.cfg shouldn't be world readable

[Christoph Anton Mitterer]

Package: pnp4nagios-bin
Version: 0.6.16-1
Severity: important
Tags: security


Hi.

Marking as severity important as it might have security implications.

process_perfdata.cfg shouldn't be world-readable.
Event though not used per default in Debian, it contains the "KEY"
option which may be used (in alternative to "KEY_FILE") to hold
the Gearman shared secret.

Cheers,
Chris.