Hi Fabio, Thanks, I've decreased it and other conf files to 640. I never caught this b/c the permissions were overwritten to 0600 in the RPM spec files.
Al On Sun, 2021-02-07 at 13:17 +0100, Fabio Fantoni wrote: > Hi, freeipmi.conf could contain sensitive informations, default > permission setted to it by build (in etc/Makefile.am) is 644, debian > decreased it in packaging after build very long time ago > (https://salsa.debian.org/debian/freeipmi/-/blob/master/debian/rules) > . > > I think is good decrease it also upstream from 644 to 640 (removing > read > permission to others). > > Thanks for any reply and sorry for my bad english. > >
