[Pkg-shadow-commits] r914 - trunk/debian

[Christian Perrier]

Author: bubulle
Date: 2006-03-15 18:26:19 +0000 (Wed, 15 Mar 2006)
New Revision: 914

Modified:
   trunk/debian/changelog
   trunk/debian/passwd.postinst
Log:
Incorporate 4.0.14-9 changelog


Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2006-03-15 18:07:54 UTC (rev 913)
+++ trunk/debian/changelog	2006-03-15 18:26:19 UTC (rev 914)
@@ -27,6 +27,14 @@
 
  -- Christian Perrier <bubulle at debian.org>  Mon,  6 Mar 2006 19:59:04 +0100
 
+shadow (1:4.0.14-9) unstable; urgency=high
+
+  * passwd.postinst: On upgrades from any prior version, chmod 600 various
+    base-config and d-i log files that might contain sensative information,
+    including in some cases, passwords. Closes: #356939
+
+ -- Christian Perrier <bubulle at debian.org>  Wed, 15 Mar 2006 08:03:43 +0100
+
 shadow (1:4.0.14-8) experimental; urgency=low
 
   * The "Salers" release

Modified: trunk/debian/passwd.postinst
===================================================================
--- trunk/debian/passwd.postinst	2006-03-15 18:07:54 UTC (rev 913)
+++ trunk/debian/passwd.postinst	2006-03-15 18:26:19 UTC (rev 914)
@@ -4,6 +4,19 @@
 
 case "$1" in
 configure)
+    # Fix permissions on various log files from old versions of the debian
+    # installer, some unrelated to passwd but we decided to put the fix
+    # here since there was no better place. This can safely be removed
+    # after etch is released.
+    if dpkg --compare-versions "$2" lt "1:4.0.14-9"; then
+	    for log in /var/log/base-config* \
+		    $(find /var/log/debian-installer/ /var/log/installer/ -type f 2>/dev/null ); do
+		if [ -e "$log" ]; then
+			chmod 600 "$log"
+		fi
+            done
+    fi
+
     rm -f /etc/pam.d/passwd.pre-upgrade 2>/dev/null
 	if ! getent group shadow | grep -q '^shadow:[^:]*:42'
 	then