Your message dated Tue, 05 Jan 2016 22:48:51 +0000
with message-id <[email protected]>
and subject line Bug#764645: fixed in iptables-persistent 0.5.7+deb7u1
has caused the Debian Bug report #764645,
regarding /etc/iptables is world-readable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
764645: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764645
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: iptables-persistent
Version: 0.5.7
Tags: security
After installing the package:
$ ls -la /etc/iptables
total 24
drwxr-xr-x 2 root root 4096 Oct 9 13:23 .
drwxr-xr-x 120 root root 4096 Oct 9 13:23 ..
-rw-r--r-- 1 root root _____ Oct 9 13:23 rules.v4
-rw-r--r-- 1 root root _____ Oct 9 13:23 rules.v6
The files are readable by world, although, as a normal user:
$ /sbin/iptables -L
iptables v1.4.14: can't initialize iptables table `filter': Permission denied
(you must be root)
Workaround:
$ chmod go-rwx /etc/iptables
--- End Message ---
--- Begin Message ---
Source: iptables-persistent
Source-Version: 0.5.7+deb7u1
We believe that the bug you reported is fixed in the latest version of
iptables-persistent, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonathan Wiltshire <[email protected]> (supplier of updated iptables-persistent
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 02 Jan 2016 21:00:01 +0000
Source: iptables-persistent
Binary: iptables-persistent
Architecture: source all
Version: 0.5.7+deb7u1
Distribution: wheezy
Urgency: medium
Maintainer: Jonathan Wiltshire <[email protected]>
Changed-By: Jonathan Wiltshire <[email protected]>
Description:
iptables-persistent - boot-time loader for iptables rules
Closes: 764645
Changes:
iptables-persistent (0.5.7+deb7u1) wheezy; urgency=medium
.
* [062648] Stop rules files being world-readable.
Thanks to Bernhard Thaler (Closes: #764645)
Checksums-Sha1:
421a8f47daf7cbbb16518f169d24dfef49c829aa 1688
iptables-persistent_0.5.7+deb7u1.dsc
8530d38f0a150a93ca10b952436059ec222fe227 13186
iptables-persistent_0.5.7+deb7u1.tar.gz
2af6fd730ac51be5b70decf20f91f75cc6a5ede7 10388
iptables-persistent_0.5.7+deb7u1_all.deb
Checksums-Sha256:
e466b4d08c875c26e97f8aaf40784627fd986f849d96393e80d1ace6cc3d5972 1688
iptables-persistent_0.5.7+deb7u1.dsc
d9cf62ce4c07bca3a7439b1e17464d595cce0e04310138e36e53e5e5da2717d6 13186
iptables-persistent_0.5.7+deb7u1.tar.gz
dd93852da9ed54caa12193470e3da9acfd25cf5b697eb7cf247d02d5e93fa1c7 10388
iptables-persistent_0.5.7+deb7u1_all.deb
Files:
18059f48ddecf21c2ef6e77d570d2b6f 1688 admin optional
iptables-persistent_0.5.7+deb7u1.dsc
1f29ad743b387dbba1b91763861525f8 13186 admin optional
iptables-persistent_0.5.7+deb7u1.tar.gz
85c8d060e5c502e80c625ab7ade3702e 10388 admin optional
iptables-persistent_0.5.7+deb7u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=rlO2
-----END PGP SIGNATURE-----
--- End Message ---
