-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue 2007-05-15 22:50:08 -0400, Daniel Kahn Gillmor
wrote:
> I've bumped along the monolithic debian packaging for
silc-server, so
> that version 1.0.4 is released as a debian package.
I've just modified the package a little bit to remove the
requirement
that the server's private key be mode 0600. This
requirement seems
like a bad idea to me: why should the silc server own the
key that it
uses? It should never need to modify it. better to allow
mode 0640
if the sysadmin wants it, so that the key can be owned by
root but
readable by a special group that the silc-server user is a
member of.
The packages are available, as always, at:
http://l
air.fifthhorseman.net/~dkg/src/silc/
Here's the change:
- --- silc-server-1.0.4.orig/apps/silcd/serverconfig.c
+++ silc-server-1.0.4/apps/silcd/serverconfig.c
 -619,10
+619,13
/* Check the private key file permissions. */
if ((stat(file_tmp, &st)) != -1) {
- - if ((st.st_mode & 0777) != 0600) {
+ if ((st.st_mode & 0137) != 0000) {
+ /* The things we don't want are: user execute,
group
+ write/execute, other anything.
+ */
SILC_SERVER_LOG_ERROR(("Wrong permissions in
private key "
"file "%s".
The permissions must be "
- - "0600.",
file_tmp));
+ "no more permissive than 0640.",
file_tmp));
return SILC_CONFIG_ESILENT;
}
}
And here are the updated sha256sums:
ae4c6f2255b2e2fd4419d8b0a8ca24e5df569e8b27a452caa3495abca4f8
482d silc-server_1.0.4-2.diff.gz
8107a7b101b3b09310500a4e2734545fc7799ea6739582a94bc70d2d9564
c8ee silc-server_1.0.4-2.dsc
9224c6b35586552f3e7da17d159a549c85f6079a02b5ba218402793bafdc
42c1 silc-server_1.0.4-2_i386.build
eaeebef19970b47f79cf3eb65d6ef0c3d356b742a1c58d7c9fb50d4e2a8e
5663 silc-server_1.0.4-2_i386.changes
fdc7d5ef740e309b2c696f8cf209af326ed2b427765b163479cef1c5654e
8496 silc-server_1.0.4-2_i386.deb
bc387bd340fae5a872214908678a57d8658e6bad452ec4599e296a33d6a7
e876 silc-server_1.0.4.orig.tar.gz
If someone could update http://s
ilcnet.org/software/download/server/,
i would appreciate it.
Regards,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcryp
t.sourceforge.net/>
iD8DBQFGS0eeiXTlFKVLY2URAmNyAKDfjnLRQdp4VAo0I8fjGs2Ax32/TgCf
ck4e
h0OaHwPIOvril4XJ0VBJhiI=
=p+LD
-----END PGP SIGNATURE-----
____________________________________________________________
___________
Info: https://lists.silcnet.org/mailman/listinfo/silc-announce
Archive: htt
ps://lists.silcnet.org/pipermail/silc-announce
FAQ: http://silcnet.org/su
pport/faq/
|