[Pkg-mediawiki-devel] Bug#384233: /var/lib/mediawiki1.7/AdminSettings.php has incorrect fs permissions

[Alexander Gerasiov]

Package: mediawiki1.7
Version: 1.7.1-1
Severity: grave
Tags: security

By default I got
-rw-r--r--  1 root     root      825 2006-08-02 15:09 AdminSettings.php
should be 640 permissions.

-- System Information:
Debian Release: 3.1
  APT prefers proposed-updates
  APT policy: (670, 'proposed-updates'), (670, 'stable'), (620, 'testing-proposed-updates'), (620, 'testing'), (600, 'unstable'), (550, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.16-2-vserver-k7
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)

Versions of packages mediawiki1.7 depends on:
ii  apache2                   2.0.54-5sarge1 next generation, scalable, extenda
ii  apache2-mpm-prefork [http 2.0.54-5sarge1 traditional model for Apache2
ii  debconf [debconf-2.0]     1.4.30.13      Debian configuration management sy
ii  mime-support              3.28-1         MIME files 'mime.types' & 'mailcap
ii  php5                      5.1.4-0.1      server-side, HTML-embedded scripti
ii  php5-cli                  5.1.4-0.1      command-line interpreter for the p
ii  php5-mysql                5.1.4-0.1      MySQL module for php5

Versions of packages mediawiki1.7 recommends:
ii  mysql-server             4.0.24-10sarge2 mysql database server binaries

-- debconf information:
* mediawiki/upgrade-1d5-adminpass: (password omitted)
* mediawiki/webserver: apache2
* mediawiki/upgrade-1d5: true
  mediawiki/upgrade-1d4:
* mediawiki/upgrade-1d5-adminuser: wikiuser