[Bug 214334] databases/couchdb: local filesystem permissions are too permissive
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Tue Nov 8 19:17:23 UTC 2016
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214334
Bug ID: 214334
Summary: databases/couchdb: local filesystem permissions are
too permissive
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: Individual Port(s)
Assignee: olgeni at FreeBSD.org
Reporter: dch at skunkwerks.at
Assignee: olgeni at FreeBSD.org
Flags: maintainer-feedback?(olgeni at FreeBSD.org)
Created attachment 176799
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=176799&action=edit
v1 patch
# issue
couchdb config files and databases should only be readable by
the API, or user/group members of couchdb/couchdb. The current
port provides direct access for non-privileged local users
through the filesystem, allowing bypassing of the reader/writer
privileges enforced by CouchDB API.
# fix
restrict all couch-related runtime data to 0750/0640 permissions
and 0600 specially for the local.ini file which contains PBKDF2-
hashed database administrator level passwords.
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list