[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-12-02 Thread James Falcon
This change intentionally won't change the permissions of already
existing files. As long as the file is root readable and writable,
manually updating the permissions for existing instances shouldn't cause
any problems.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-12-01 Thread xiaoyi chen
Hello Dan, @Dan Watkins
I have a question about the permission of cloud-init-output.log when cloud-init 
upgrade to the version which contains this bug fix. I found that before 
upgrade, the permission of cloud-init-output.log is 644 and user:group is 
root:root, while after upgrade, the permission doesn't change to 640 root:adm. 
I didn't do any log cleaning during the upgrade, that means 
cloud-init-output.log was created by the old version of cloud-init.
My expected result is the permission of cloud-init-output.log would be changed 
after upgrade. What's your opinion? Is it a bug or an expected behavior? 

thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-05-05 Thread James Falcon
This bug is believed to be fixed in cloud-init in version 21.2. If this
is still a problem for you, please make a comment and set the state back
to New

Thank you.

** Changed in: cloud-init
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-04-15 Thread Launchpad Bug Tracker
This bug was fixed in the package cloud-init -
21.1-19-gbad84ad4-0ubuntu1~16.04.1

---
cloud-init (21.1-19-gbad84ad4-0ubuntu1~16.04.1) xenial; urgency=medium

  * d/cloud-init.postinst: Change output log permissions on upgrade
(LP: #1918303)
  * d/cloud-init.manpages: include upstream manpages in package (LP: #1908548)
  * drop the following cherry-picks now included:
+ cpick-4f62ae8d-Fix-regression-with-handling-of-IMDS-ssh-keys-760
  * refresh patches:
   + debian/patches/azure-apply-network-config-false.patch
   + debian/patches/openstack-no-network-config.patch
  * New upstream snapshot. (LP: #1920272)
- .travis.yml: generate an SSH key before running tests (#848)
- write passwords only to serial console, lock down cloud-init-output.log
  (#847)
- Fix apt default integration test (#845)
- integration_tests: bump pycloudlib dependency (#846)
- commit f35181fa970453ba6c7c14575b12185533391b97 [eb3095]
- archlinux: Fix broken locale logic (#841) [Kristian Klausen]
- Integration test for #783 (#832)
- integration_tests: mount more paths IN_PLACE (#838)
- Fix requiring device-number on EC2 derivatives (#836)
- Remove the vi comment from the part-handler example (#835)
- net: exclude OVS internal interfaces in get_interfaces (#829)
- tox.ini: pass OS_* environment variables to integration tests (#830)
- integration_tests: add OpenStack as a platform (#804)
- Add flexibility to IMDS api-version (#793) [Thomas Stringer]
- Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
  [Paride Legovini]
- doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
- archlinux: Use hostnamectl to set the transient hostname (#797)
  [Kristian Klausen]
- cc_keys_to_console.py: Add documentation for recently added config key
  (#824) [dermotbradley]
- Update cc_set_hostname documentation (#818) [Toshi Aoyama]
- Release 21.1 (#820)
- Azure: Support for VMs without ephemeral resource disks. (#800)
  [Johnson Shi]
- cc_keys_to_console: add option to disable key emission (#811)
  [Michael Hudson-Doyle]
- integration_tests: introduce lxd_use_exec mark (#802)
- azure: case-insensitive UUID to avoid new IID during kernel upgrade
  (#798)
- stale.yml: don't ask submitters to reopen PRs (#816)
- integration_tests: fix use of SSH agent within tox (#815)
- integration_tests: add UPGRADE CloudInitSource (#812)
- integration_tests: use unique MAC addresses for tests (#813)
- Update .gitignore (#814)
- Port apt cloud_tests to integration tests (#808)
- integration_tests: fix test_gh626 on LXD VMs (#809)
- Fix attempting to decode binary data in test_seed_random_data test (#806)
- Remove wait argument from tests with session_cloud calls (#805)
- Datasource for UpCloud (#743) [Antti Myyrä]
- test_gh668: fix failure on LXD VMs (#801)
- openstack: read the dynamic metadata group vendor_data2.json (#777)
  [Andrew Bogott]
- includedir in suoders can be prefixed by "arroba" (#783)
  [Jordi Massaguer Pla]
- Merge upstream/20.4.1 into master
- [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
- Revert integration test associated with reverted #586 (#784)
- Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
- Add Rick Harding to CLA signers (#792) [Rick Harding]
- HACKING.rst: add clarifying note to LP CLA process section (#789)
- Stop linting cloud_tests (#791)
- cloud-tests: update cryptography requirement (#790) [Joshua Powers]
- Remove 'remove-raise-on-failure' calls from integration_tests (#788)
- Use more cloud defaults in integration tests (#757)
- Adding self to cla signers (#776) [Andrew Bogott]
- doc: avoid two warnings (#781) [Dan Kenigsberg]
- Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
- Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
- integration_tests: log image serial if available (#772)
- Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  (#775)
- [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
- net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
- .travis.yml: don't run cloud_tests in CI (#756)
- test_upgrade: add some missing commas (#769)
- cc_seed_random: update documentation and fix integration test (#771)
- Fix test gh-632 test to only run on NoCloud (#770)
- archlinux: fix package upgrade command handling (#768) [Bao Trinh]
- integration_tests: add integration test for LP:1910835 (#761)
- Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
- integration_tests: log cloud-init version in SUT (#758)
- Add ajmyyra as contributor (#742) [Antti Myyrä]
- net_convert: add some missing help text (#755)
- Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 sta

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-04-15 Thread Launchpad Bug Tracker
This bug was fixed in the package cloud-init -
21.1-19-gbad84ad4-0ubuntu1~18.04.1

---
cloud-init (21.1-19-gbad84ad4-0ubuntu1~18.04.1) bionic; urgency=medium

  * d/cloud-init.postinst: Change output log permissions on upgrade
(LP: #1918303)
  * d/cloud-init.manpages: include upstream manpages in package (LP: #1908548)
  * drop the following cherry-picks now included:
+ cpick-4f62ae8d-Fix-regression-with-handling-of-IMDS-ssh-keys-760
  * refresh patches:
   + debian/patches/openstack-no-network-config.patch
  * New upstream snapshot. (LP: #1920272)
- .travis.yml: generate an SSH key before running tests (#848)
- write passwords only to serial console, lock down cloud-init-output.log
  (#847)
- Fix apt default integration test (#845)
- integration_tests: bump pycloudlib dependency (#846)
- commit f35181fa970453ba6c7c14575b12185533391b97 [eb3095]
- archlinux: Fix broken locale logic (#841) [Kristian Klausen]
- Integration test for #783 (#832)
- integration_tests: mount more paths IN_PLACE (#838)
- Fix requiring device-number on EC2 derivatives (#836)
- Remove the vi comment from the part-handler example (#835)
- net: exclude OVS internal interfaces in get_interfaces (#829)
- tox.ini: pass OS_* environment variables to integration tests (#830)
- integration_tests: add OpenStack as a platform (#804)
- Add flexibility to IMDS api-version (#793) [Thomas Stringer]
- Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
  [Paride Legovini]
- doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
- archlinux: Use hostnamectl to set the transient hostname (#797)
  [Kristian Klausen]
- cc_keys_to_console.py: Add documentation for recently added config key
  (#824) [dermotbradley]
- Update cc_set_hostname documentation (#818) [Toshi Aoyama]
- Release 21.1 (#820)
- Azure: Support for VMs without ephemeral resource disks. (#800)
  [Johnson Shi]
- cc_keys_to_console: add option to disable key emission (#811)
  [Michael Hudson-Doyle]
- integration_tests: introduce lxd_use_exec mark (#802)
- azure: case-insensitive UUID to avoid new IID during kernel upgrade
  (#798)
- stale.yml: don't ask submitters to reopen PRs (#816)
- integration_tests: fix use of SSH agent within tox (#815)
- integration_tests: add UPGRADE CloudInitSource (#812)
- integration_tests: use unique MAC addresses for tests (#813)
- Update .gitignore (#814)
- Port apt cloud_tests to integration tests (#808)
- integration_tests: fix test_gh626 on LXD VMs (#809)
- Fix attempting to decode binary data in test_seed_random_data test (#806)
- Remove wait argument from tests with session_cloud calls (#805)
- Datasource for UpCloud (#743) [Antti Myyrä]
- test_gh668: fix failure on LXD VMs (#801)
- openstack: read the dynamic metadata group vendor_data2.json (#777)
  [Andrew Bogott]
- includedir in suoders can be prefixed by "arroba" (#783)
  [Jordi Massaguer Pla]
- Merge upstream/20.4.1 into master
- [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
- Revert integration test associated with reverted #586 (#784)
- Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
- Add Rick Harding to CLA signers (#792) [Rick Harding]
- HACKING.rst: add clarifying note to LP CLA process section (#789)
- Stop linting cloud_tests (#791)
- cloud-tests: update cryptography requirement (#790) [Joshua Powers]
- Remove 'remove-raise-on-failure' calls from integration_tests (#788)
- Use more cloud defaults in integration tests (#757)
- Adding self to cla signers (#776) [Andrew Bogott]
- doc: avoid two warnings (#781) [Dan Kenigsberg]
- Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
- Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
- integration_tests: log image serial if available (#772)
- Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  (#775)
- [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
- net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
- .travis.yml: don't run cloud_tests in CI (#756)
- test_upgrade: add some missing commas (#769)
- cc_seed_random: update documentation and fix integration test (#771)
- Fix test gh-632 test to only run on NoCloud (#770)
- archlinux: fix package upgrade command handling (#768) [Bao Trinh]
- integration_tests: add integration test for LP:1910835 (#761)
- Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
- integration_tests: log cloud-init version in SUT (#758)
- Add ajmyyra as contributor (#742) [Antti Myyrä]
- net_convert: add some missing help text (#755)
- Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
  (#753) [Eduardo Otubo]
- doc: docum

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-04-15 Thread Launchpad Bug Tracker
This bug was fixed in the package cloud-init -
21.1-19-gbad84ad4-0ubuntu1~20.04.1

---
cloud-init (21.1-19-gbad84ad4-0ubuntu1~20.04.1) focal; urgency=medium

  * d/cloud-init.postinst: Change output log permissions on upgrade
(LP: #1918303)
  * d/cloud-init.manpages: include upstream manpages in package (LP: #1908548)
  * drop the following cherry-picks now included:
+ cpick-4f62ae8d-Fix-regression-with-handling-of-IMDS-ssh-keys-760
  * New upstream snapshot. (LP: #1920272)
- .travis.yml: generate an SSH key before running tests (#848)
- write passwords only to serial console, lock down cloud-init-output.log
  (#847)
- Fix apt default integration test (#845)
- integration_tests: bump pycloudlib dependency (#846)
- commit f35181fa970453ba6c7c14575b12185533391b97 [eb3095]
- archlinux: Fix broken locale logic (#841) [Kristian Klausen]
- Integration test for #783 (#832)
- integration_tests: mount more paths IN_PLACE (#838)
- Fix requiring device-number on EC2 derivatives (#836)
- Remove the vi comment from the part-handler example (#835)
- net: exclude OVS internal interfaces in get_interfaces (#829)
- tox.ini: pass OS_* environment variables to integration tests (#830)
- integration_tests: add OpenStack as a platform (#804)
- Add flexibility to IMDS api-version (#793) [Thomas Stringer]
- Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
  [Paride Legovini]
- doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
- archlinux: Use hostnamectl to set the transient hostname (#797)
  [Kristian Klausen]
- cc_keys_to_console.py: Add documentation for recently added config key
  (#824) [dermotbradley]
- Update cc_set_hostname documentation (#818) [Toshi Aoyama]
- Release 21.1 (#820)
- Azure: Support for VMs without ephemeral resource disks. (#800)
  [Johnson Shi]
- cc_keys_to_console: add option to disable key emission (#811)
  [Michael Hudson-Doyle]
- integration_tests: introduce lxd_use_exec mark (#802)
- azure: case-insensitive UUID to avoid new IID during kernel upgrade
  (#798)
- stale.yml: don't ask submitters to reopen PRs (#816)
- integration_tests: fix use of SSH agent within tox (#815)
- integration_tests: add UPGRADE CloudInitSource (#812)
- integration_tests: use unique MAC addresses for tests (#813)
- Update .gitignore (#814)
- Port apt cloud_tests to integration tests (#808)
- integration_tests: fix test_gh626 on LXD VMs (#809)
- Fix attempting to decode binary data in test_seed_random_data test (#806)
- Remove wait argument from tests with session_cloud calls (#805)
- Datasource for UpCloud (#743) [Antti Myyrä]
- test_gh668: fix failure on LXD VMs (#801)
- openstack: read the dynamic metadata group vendor_data2.json (#777)
  [Andrew Bogott]
- includedir in suoders can be prefixed by "arroba" (#783)
  [Jordi Massaguer Pla]
- Merge upstream/20.4.1 into master
- [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
- Revert integration test associated with reverted #586 (#784)
- Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
- Add Rick Harding to CLA signers (#792) [Rick Harding]
- HACKING.rst: add clarifying note to LP CLA process section (#789)
- Stop linting cloud_tests (#791)
- cloud-tests: update cryptography requirement (#790) [Joshua Powers]
- Remove 'remove-raise-on-failure' calls from integration_tests (#788)
- Use more cloud defaults in integration tests (#757)
- Adding self to cla signers (#776) [Andrew Bogott]
- doc: avoid two warnings (#781) [Dan Kenigsberg]
- Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
- Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
- integration_tests: log image serial if available (#772)
- Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  (#775)
- [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
- net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
- .travis.yml: don't run cloud_tests in CI (#756)
- test_upgrade: add some missing commas (#769)
- cc_seed_random: update documentation and fix integration test (#771)
- Fix test gh-632 test to only run on NoCloud (#770)
- archlinux: fix package upgrade command handling (#768) [Bao Trinh]
- integration_tests: add integration test for LP:1910835 (#761)
- Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
- integration_tests: log cloud-init version in SUT (#758)
- Add ajmyyra as contributor (#742) [Antti Myyrä]
- net_convert: add some missing help text (#755)
- Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
  (#753) [Eduardo Otubo]
- doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
- Add example configu

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-04-15 Thread Launchpad Bug Tracker
This bug was fixed in the package cloud-init -
21.1-19-gbad84ad4-0ubuntu1~20.10.1

---
cloud-init (21.1-19-gbad84ad4-0ubuntu1~20.10.1) groovy; urgency=medium

  * d/cloud-init.postinst: Change output log permissions on upgrade
(LP: #1918303)
  * d/cloud-init.manpages: include upstream manpages in package (LP: #1908548)
  * drop the following cherry-picks now included:
+ cpick-4f62ae8d-Fix-regression-with-handling-of-IMDS-ssh-keys-760
  * New upstream snapshot. (LP: #1920272)
- .travis.yml: generate an SSH key before running tests (#848)
- write passwords only to serial console, lock down cloud-init-output.log
  (#847)
- Fix apt default integration test (#845)
- integration_tests: bump pycloudlib dependency (#846)
- commit f35181fa970453ba6c7c14575b12185533391b97 [eb3095]
- archlinux: Fix broken locale logic (#841) [Kristian Klausen]
- Integration test for #783 (#832)
- integration_tests: mount more paths IN_PLACE (#838)
- Fix requiring device-number on EC2 derivatives (#836)
- Remove the vi comment from the part-handler example (#835)
- net: exclude OVS internal interfaces in get_interfaces (#829)
- tox.ini: pass OS_* environment variables to integration tests (#830)
- integration_tests: add OpenStack as a platform (#804)
- Add flexibility to IMDS api-version (#793) [Thomas Stringer]
- Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
  [Paride Legovini]
- doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
- archlinux: Use hostnamectl to set the transient hostname (#797)
  [Kristian Klausen]
- cc_keys_to_console.py: Add documentation for recently added config key
  (#824) [dermotbradley]
- Update cc_set_hostname documentation (#818) [Toshi Aoyama]
- Release 21.1 (#820)
- Azure: Support for VMs without ephemeral resource disks. (#800)
  [Johnson Shi]
- cc_keys_to_console: add option to disable key emission (#811)
  [Michael Hudson-Doyle]
- integration_tests: introduce lxd_use_exec mark (#802)
- azure: case-insensitive UUID to avoid new IID during kernel upgrade
  (#798)
- stale.yml: don't ask submitters to reopen PRs (#816)
- integration_tests: fix use of SSH agent within tox (#815)
- integration_tests: add UPGRADE CloudInitSource (#812)
- integration_tests: use unique MAC addresses for tests (#813)
- Update .gitignore (#814)
- Port apt cloud_tests to integration tests (#808)
- integration_tests: fix test_gh626 on LXD VMs (#809)
- Fix attempting to decode binary data in test_seed_random_data test (#806)
- Remove wait argument from tests with session_cloud calls (#805)
- Datasource for UpCloud (#743) [Antti Myyrä]
- test_gh668: fix failure on LXD VMs (#801)
- openstack: read the dynamic metadata group vendor_data2.json (#777)
  [Andrew Bogott]
- includedir in suoders can be prefixed by "arroba" (#783)
  [Jordi Massaguer Pla]
- Merge upstream/20.4.1 into master
- [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
- Revert integration test associated with reverted #586 (#784)
- Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
- Add Rick Harding to CLA signers (#792) [Rick Harding]
- HACKING.rst: add clarifying note to LP CLA process section (#789)
- Stop linting cloud_tests (#791)
- cloud-tests: update cryptography requirement (#790) [Joshua Powers]
- Remove 'remove-raise-on-failure' calls from integration_tests (#788)
- Use more cloud defaults in integration tests (#757)
- Adding self to cla signers (#776) [Andrew Bogott]
- doc: avoid two warnings (#781) [Dan Kenigsberg]
- Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
- Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
- integration_tests: log image serial if available (#772)
- Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  (#775)
- [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
- net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
- .travis.yml: don't run cloud_tests in CI (#756)
- test_upgrade: add some missing commas (#769)
- cc_seed_random: update documentation and fix integration test (#771)
- Fix test gh-632 test to only run on NoCloud (#770)
- archlinux: fix package upgrade command handling (#768) [Bao Trinh]
- integration_tests: add integration test for LP:1910835 (#761)
- Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
- integration_tests: log cloud-init version in SUT (#758)
- Add ajmyyra as contributor (#742) [Antti Myyrä]
- net_convert: add some missing help text (#755)
- Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
  (#753) [Eduardo Otubo]
- doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
- Add example config

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-04-15 Thread James Falcon
xenial-proposed, bionic-proposed, focal-proposed, and groovy-proposed were all 
tested here:
https://github.com/cloud-init/ubuntu-sru/blob/main/bugs/lp-1918303.txt

** Tags removed: verification-needed verification-needed-bionic 
verification-needed-focal verification-needed-groovy verification-needed-xenial
** Tags added: verification-done verification-done-bionic 
verification-done-focal verification-done-groovy verification-done-xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-03-25 Thread Carl Pearson
Hello all,

I tested the focal-proposed package on a new install of Ubuntu Server
and was unable to replicate the issue. The random passwords did not
appear written in the cloud-init-output.log file and the output file's
permissions were restricted. Near as I can tell it appears to be fixed.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-03-23 Thread Brian Murray
Hello Carl, or anyone else affected,

Accepted cloud-init into bionic-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/cloud-
init/21.1-19-gbad84ad4-0ubuntu1~18.04.1 in a few hours, and then in the
-proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
bionic to verification-done-bionic. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-bionic. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: cloud-init (Ubuntu Bionic)
   Status: New => Fix Committed

** Tags added: verification-needed-bionic

** Changed in: cloud-init (Ubuntu Xenial)
   Status: New => Fix Committed

** Tags added: verification-needed-xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-03-23 Thread Brian Murray
Hello Carl, or anyone else affected,

Accepted cloud-init into groovy-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/cloud-
init/21.1-19-gbad84ad4-0ubuntu1~20.10.1 in a few hours, and then in the
-proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
groovy to verification-done-groovy. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-groovy. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: cloud-init (Ubuntu Groovy)
   Status: New => Fix Committed

** Tags added: verification-needed verification-needed-groovy

** Changed in: cloud-init (Ubuntu Focal)
   Status: New => Fix Committed

** Tags added: verification-needed-focal

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1918303] Re: Randomly set credentials written in cleartext to world-readable file

2021-03-23 Thread Brian Murray
cloud-init (21.1-19-gbad84ad4-0ubuntu1) hirsute; urgency=medium

  * d/cloud-init.postinst: Change output log permissions on upgrade
(LP: #1918303)

** Also affects: cloud-init (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: cloud-init (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1918303

Title:
  Randomly set credentials written in cleartext to world-readable file

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1918303/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs