0.5.4 sabnzbd.ini permissions: only for newly created sabnzbd.ini (Linux, Mac)
Posted: August 25th, 2010, 1:07 am
Hi, a FYI / heads up:
0.5.4 has a bug fix "Make sure access to sabnzbd.ini is blocked for group and world (Unix, OSX)."
Reading http://bazaar.launchpad.net/~sabnzbd/sa ... /config.py (and running SAB), it looks like only *newly created* sabnzbd.ini files get the new safe permissions. Already existing sabnzbd.ini stay world-readable, which can be a risk.
So, existing / upgrading users should do chmod 600 theirselves, like below ...
sander@quirinius:~$ ls -al .sabnzbd/sabnzbd.ini
-rw-r--r-- 1 sander sander 4118 2010-08-25 07:52 .sabnzbd/sabnzbd.ini
sander@quirinius:~$ chmod 600 .sabnzbd/sabnzbd.ini
sander@quirinius:~$ ls -al .sabnzbd/sabnzbd.ini
-rw------- 1 sander sander 4118 2010-08-25 07:52 .sabnzbd/sabnzbd.ini
sander@quirinius:~$
0.5.4 has a bug fix "Make sure access to sabnzbd.ini is blocked for group and world (Unix, OSX)."
Reading http://bazaar.launchpad.net/~sabnzbd/sa ... /config.py (and running SAB), it looks like only *newly created* sabnzbd.ini files get the new safe permissions. Already existing sabnzbd.ini stay world-readable, which can be a risk.
So, existing / upgrading users should do chmod 600 theirselves, like below ...
sander@quirinius:~$ ls -al .sabnzbd/sabnzbd.ini
-rw-r--r-- 1 sander sander 4118 2010-08-25 07:52 .sabnzbd/sabnzbd.ini
sander@quirinius:~$ chmod 600 .sabnzbd/sabnzbd.ini
sander@quirinius:~$ ls -al .sabnzbd/sabnzbd.ini
-rw------- 1 sander sander 4118 2010-08-25 07:52 .sabnzbd/sabnzbd.ini
sander@quirinius:~$