Bug#481765: marked as done (exim4-base: con.monthly recreate gnutls-params without read access)

2008-05-22 Thread Andreas Metzler
On 2008-05-22 Marc Haber wrote: On Sun, May 18, 2008 at 02:30:42PM +0200, Jean-Luc Coulon (f5ibh) wrote: /etc/cron.monthly/exim4-base refreshes GnuTLS via /usr/share/exim4/exim4_refresh_gnutls-params /etc/cron.monthly/exim4-base was introduced in 4.69-3 and removed in 4.69-4, one day

Bug#481765: marked as done (exim4-base: con.monthly recreate gnutls-params without read access)

2008-05-22 Thread Marc Haber
On Thu, May 22, 2008 at 10:44:58AM +0200, Andreas Metzler wrote: I think there really is bug here, /var/spool/exim4/gnutls-params should not generate its output with root:root 600 but either root:Debian-exim 640 (if it contains sensible data) or 644 root:root if not. That one was fixed in

Bug#481765: marked as done (exim4-base: con.monthly recreate gnutls-params without read access)

2008-05-22 Thread Andreas Metzler
On 2008-05-22 Marc Haber [EMAIL PROTECTED] wrote: On Thu, May 22, 2008 at 10:44:58AM +0200, Andreas Metzler wrote: I think there really is bug here, /var/spool/exim4/gnutls-params should not generate its output with root:root 600 but either root:Debian-exim 640 (if it contains sensible

Bug#481765: marked as done (exim4-base: con.monthly recreate gnutls-params without read access)

2008-05-22 Thread Marc Haber
found #481765 4.69-5 thanks On Thu, May 22, 2008 at 01:52:24PM +0200, Andreas Metzler wrote: This bug (gnutls-params unreadable for exim daemon), was *introduced* in 4.69-5. Previously the file was 400 Debian-exim:Debian-exim, but now it is 0400 root:root. - The file mode is set by

Bug#481765: marked as done (exim4-base: con.monthly recreate gnutls-params without read access)

2008-05-22 Thread Andreas Metzler
On 2008-05-22 Marc Haber [EMAIL PROTECTED] wrote: On Thu, May 22, 2008 at 01:52:24PM +0200, Andreas Metzler wrote: [...] $TIMEOUT /usr/bin/certtool --generate-dh-params --bits 2048 \ $tempgnutls 2 /dev/null ; then +chmod 644 $tempgnutls mv -f $tempgnutls $PARAMFILE