From 3807f62c21110438e7803353a7289dae73e30aa4098f07331a485accbd01c48a Mon Sep 17 00:00:00 2001
From: OBS User unknown <null@suse.de>
Date: Wed, 22 Oct 2008 16:08:54 +0000
Subject: [PATCH] OBS-URL:
 https://build.opensuse.org/package/show/openSUSE:Factory/kdump?expand=0&rev=28

---
 kdump.changes |  6 ++++++
 kdump.spec    | 14 +++++++++++++-
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/kdump.changes b/kdump.changes
index e6fa23d..6e54ed3 100644
--- a/kdump.changes
+++ b/kdump.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Oct 17 16:19:27 CEST 2008 - bwalle@suse.de
+
+- /etc/sysconfig/kdump should be only readable as root since it
+  may contain passwords (bnc#436042).
+
 -------------------------------------------------------------------
 Wed Oct 15 15:05:55 CEST 2008 - bwalle@suse.de
 
diff --git a/kdump.spec b/kdump.spec
index d5c7701..148b250 100644
--- a/kdump.spec
+++ b/kdump.spec
@@ -22,7 +22,7 @@ Url:            http://freehg.org/u/bwalle/kdump/
 Name:           kdump
 License:        GPL v2 or later
 Version:        0.6.3
-Release:        29
+Release:        30
 Requires:       curl openssh makedumpfile
 Summary:        Script for kdump
 Group:          System/Kernel
@@ -83,7 +83,16 @@ ln -s /etc/init.d/boot.kdump $RPM_BUILD_ROOT/sbin/rckdump
 mkdir $RPM_BUILD_ROOT/var/crash
 
 %post
+# change only permission if the file exists before /etc/sysconfig/kdump
+# has been created from /var/adm/fillup-templates/sysconfig.kdump
+change_permission=0
+if [ ! -f /etc/sysconfig/kdump ] ; then
+    change_permission=1
+fi
 %{fillup_and_insserv -n kdump boot.kdump}
+if (( $change_permission )) ; then
+    chmod 0600 /etc/sysconfig/kdump
+fi
 /sbin/mkinitrd_setup
 # if /var/log/dump is empty, make it a symlink to /var/crash
 if test -d /var/log/dump && rmdir /var/log/dump &>/dev/null ||
@@ -121,6 +130,9 @@ rm /var/log/dump &>/dev/null || true
 %config %{_sysconfdir}/udev/rules.d/70-kdump.rules
 
 %changelog
+* Fri Oct 17 2008 bwalle@suse.de
+- /etc/sysconfig/kdump should be only readable as root since it
+  may contain passwords (bnc#436042).
 * Wed Oct 15 2008 bwalle@suse.de
 - Reflect 'boot.kdump' in kdump(7).
 - Add rpmlintrc: The init script name is correct.