diff options
| author |   Francisco Blas (klondike) Izquierdo Riera <klondike@gentoo.org> | 2019-09-07 22:38:38 +0200 |
|---|---|---|
| committer |   Matthew Thode <prometheanfire@gentoo.org> | 2019-09-07 16:24:11 -0500 |
| commit | 73598a5e25d6583dde4f08a34df5073817c5a391 (patch) | |
| tree | 7a1a91aef3385617e709c20b7bc0625769162231 /app-misc | |
| parent | x11-misc/zim: x86 stable (bug #687176) (diff) | |
| download | gentoo-73598a5e25d6583dde4f08a34df5073817c5a391.tar.gz gentoo-73598a5e25d6583dde4f08a34df5073817c5a391.tar.bz2 gentoo-73598a5e25d6583dde4f08a34df5073817c5a391.zip | |
net-firewall/nftables: Fix permissions for rules.save
Due to a bug, the rules.save file was created with the wrong
permissions which allowed all users to read the file with the
system rules although root privileges are usually required to
do so.
To fix this issue, the following measures have been taken:
* The umask on nftables-mk.sh is now correctly set to 177
* nftables.sh now also sets the umask before saving the rules
* The ebuilds will warn on post installation if the rules.save
has insecure permissions
* The ebuilds have been bumped to ensure these changes are
applied
Bug: https://bugs.gentoo.org/691326
Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org>
Package-Manager: Portage-2.3.69, Repoman-2.3.11
Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
Diffstat (limited to 'app-misc')
0 files changed, 0 insertions, 0 deletions