summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThierry Vignaud <tv@mandriva.org>2010-02-04 15:07:38 +0000
committerThierry Vignaud <tv@mandriva.org>2010-02-04 15:07:38 +0000
commite43242e04ad4bc0bf47b60da01799faaa844902f (patch)
tree7030257ec0997c292b7335d6ec82835905435cd2
parentbefd6e9dc1cfe837f8b9f1956ed6a9bd0a92aaf5 (diff)
downloaddrakx-backup-do-not-use-e43242e04ad4bc0bf47b60da01799faaa844902f.tar
drakx-backup-do-not-use-e43242e04ad4bc0bf47b60da01799faaa844902f.tar.gz
drakx-backup-do-not-use-e43242e04ad4bc0bf47b60da01799faaa844902f.tar.bz2
drakx-backup-do-not-use-e43242e04ad4bc0bf47b60da01799faaa844902f.tar.xz
drakx-backup-do-not-use-e43242e04ad4bc0bf47b60da01799faaa844902f.zip
(write_grub) ensure /boot/grub/menu.lst permissions are 0600 since it
can contains a password
-rw-r--r--perl-install/NEWS2
-rw-r--r--perl-install/bootloader.pm2
-rw-r--r--perl-install/install/NEWS2
3 files changed, 5 insertions, 1 deletions
diff --git a/perl-install/NEWS b/perl-install/NEWS
index 2c8b8f1c2..aab15d0e7 100644
--- a/perl-install/NEWS
+++ b/perl-install/NEWS
@@ -10,6 +10,8 @@
o wifi: r8187se, r8192_pci, r8192u_usb, rt2800pci, vt6655_stage, vt6656_stage
- drakboot:
o default to always crypt grub passwords
+ o ensure /boot/grub/menu.lst permissions are 0600 since it can
+ contains a password
o fix support for crypted grub passwords
Version 13.9 - 4 February 2010
diff --git a/perl-install/bootloader.pm b/perl-install/bootloader.pm
index 5b2ac248c..08b099890 100644
--- a/perl-install/bootloader.pm
+++ b/perl-install/bootloader.pm
@@ -1810,7 +1810,7 @@ sub write_grub {
my $f = "$::prefix/boot/grub/menu.lst";
log::l("writing grub config to $f");
renamef($f, $f . ($o_backup_extension || '.old'));
- output($f, map { "$_\n" } @conf);
+ output_with_perm($f, 0600, map { "$_\n" } @conf);
}
{
my $f = "$::prefix/boot/grub/install.sh";
diff --git a/perl-install/install/NEWS b/perl-install/install/NEWS
index 132cffa7b..a95b8d45e 100644
--- a/perl-install/install/NEWS
+++ b/perl-install/install/NEWS
@@ -13,6 +13,8 @@
o always display security settings
o allow timeout to be '0'
o default to always crypt grub passwords
+ o ensure /boot/grub/menu.lst permissions are 0600 since it can
+ contains a password
- partitioning wizard:
o offer to install on dmraid (instead of crashing if no other disk)
o offer to install on existing lvm