OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kdump?expand=0&rev=28

kdump.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Oct 17 16:19:27 CEST 2008 - bwalle@suse.de
+
+- /etc/sysconfig/kdump should be only readable as root since it
+  may contain passwords (bnc#436042).
+
 -------------------------------------------------------------------
 Wed Oct 15 15:05:55 CEST 2008 - bwalle@suse.de
 

kdump.spec

@@ -22,7 +22,7 @@ Url:            http://freehg.org/u/bwalle/kdump/
 Name:           kdump
 License:        GPL v2 or later
 Version:        0.6.3
-Release:        29
+Release:        30
 Requires:       curl openssh makedumpfile
 Summary:        Script for kdump
 Group:          System/Kernel
@@ -83,7 +83,16 @@ ln -s /etc/init.d/boot.kdump $RPM_BUILD_ROOT/sbin/rckdump
 mkdir $RPM_BUILD_ROOT/var/crash
 
 %post
+# change only permission if the file exists before /etc/sysconfig/kdump
+# has been created from /var/adm/fillup-templates/sysconfig.kdump
+change_permission=0
+if [ ! -f /etc/sysconfig/kdump ] ; then
+    change_permission=1
+fi
 %{fillup_and_insserv -n kdump boot.kdump}
+if (( $change_permission )) ; then
+    chmod 0600 /etc/sysconfig/kdump
+fi
 /sbin/mkinitrd_setup
 # if /var/log/dump is empty, make it a symlink to /var/crash
 if test -d /var/log/dump && rmdir /var/log/dump &>/dev/null ||
@@ -121,6 +130,9 @@ rm /var/log/dump &>/dev/null || true
 %config %{_sysconfdir}/udev/rules.d/70-kdump.rules
 
 %changelog
+* Fri Oct 17 2008 bwalle@suse.de
+- /etc/sysconfig/kdump should be only readable as root since it
+  may contain passwords (bnc#436042).
 * Wed Oct 15 2008 bwalle@suse.de
 - Reflect 'boot.kdump' in kdump(7).
 - Add rpmlintrc: The init script name is correct.