Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #61783
| Path | csiph.com!feeder.erje.net!1.eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod |
|---|---|
| From | Nazar Mokrynskyi <nazar@mokrynskyi.com> |
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#905920: (no subject) |
| Date | Sat, 11 Aug 2018 20:30:02 +0200 |
| Message-ID | <wlGOe-8ip-5@gated-at.bofh.it> (permalink) |
| X-Original-To | Debian Bug Tracking System <submit@bugs.debian.org> |
| X-Mailbox-Line | From debian-bugs-dist-request@lists.debian.org Sat Aug 11 18:21:15 2018 |
| Old-Return-Path | <debbugs@buxtehude.debian.org> |
| X-Spam-Flag | NO |
| X-Spam-Score | -2.399 |
| Reply-To | Nazar Mokrynskyi <nazar@mokrynskyi.com>, 905920@bugs.debian.org |
| Resent-To | debian-bugs-dist@lists.debian.org |
| Resent-Cc | team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian kernel team <debian-kernel@lists.debian.org> |
| X-Debian-Pr-Message | report 905920 |
| X-Debian-Pr-Package | initramfs-tools |
| X-Debian-Pr-Keywords | security |
| X-Debian-Pr-Source | initramfs-tools |
| X-Spam-Bayes | score:0.0000 Tokens: new, 58; hammy, 149; neutral, 36; spammy, 1. spammytokens:0.850-+--H*MI:localdomain hammytokens:0.000-+--H*M:reportbug, 0.000-+--H*MI:reportbug, 0.000-+--rw-r, 0.000-+--H*x:reportbug, 0.000-+--H*UA:reportbug |
| Authentication-Results | mx.mokrynskyi.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=mokrynskyi.com |
| Dkim-Signature | v=1; a=rsa-sha256; c=relaxed/simple; d=mokrynskyi.com; h=date:date:x-mailer:message-id:to:from:from :content-transfer-encoding:mime-version:content-type :content-type; s=dkim; t=1534010865; x=1534874866; bh=i9yfB6SsRj m9+v7FgmsjctWAhAcQp4/g+TbwfKxREJU=; b=pR20HOJYsZn/ovf3QuwbSJQrF/ jY1wu60sto9y45GTOB6RV/dHqlyd+uS0DEzOfaeSRswIkrKQmCIFBWenjvS4j+tU Py2cQvi9Jd8r76sUCal6OzdPzACQTaZ0eajAlEyIex7wYCSRpQTxEpIOOrb/2S7L yWb8OMdjl7FBCWuFE= |
| Content-Type | text/plain; charset="us-ascii" |
| MIME-Version | 1.0 |
| Content-Transfer-Encoding | 7bit |
| X-Mailer | reportbug 7.1.8ubuntu1 |
| X-Greylist | delayed 539 seconds by postgrey-1.36 at buxtehude; Sat, 11 Aug 2018 18:16:47 UTC |
| X-Debian-Message | from BTS |
| X-Mailing-List | <debian-bugs-dist@lists.debian.org> archive/latest/1478396 |
| List-ID | <debian-bugs-dist.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-bugs-dist/> |
| Approved | robomod@news.nic.it |
| Lines | 26 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Date | Sat, 11 Aug 2018 21:07:34 +0300 |
| X-Original-Message-ID | <153401085463.18615.9800552550556510663.reportbug@localhost.localdomain> |
| Xref | csiph.com linux.debian.bugs.dist:912326 linux.debian.kernel:61783 |
Cross-posted to 2 groups.
Show key headers only | View raw
Package: initramfs-tools Version: 0.131ubuntu8 Severity: normal Tags: security I have fully encrypted (UEFI, LUKS, BTRFS) system and in order to avoid typing password for the second time after GRUB2 added `keyscript` option to `/etc/crypttab`. Keyscript file is only readable by root, however, resulting `initrd.img*` file is readable by anyone, which I think is a security issue. I'd like to see `initrd.img*` files to also be readable by root user only. -- Package-specific info: -- initramfs sizes -rw-r--r-- 1 root root 53M Aug 11 19:50 /boot/initrd.img-4.17.0-5-generic -rw-r--r-- 1 root root 53M Aug 11 19:49 /boot/initrd.img-4.17.0-6-generic -rw-r--r-- 1 root root 53M Aug 11 19:49 /boot/initrd.img-4.17.0-7-generic -- /proc/cmdline BOOT_IMAGE=/root/boot/vmlinuz-4.17.0-5-generic root=UUID=5170aca4-061a-4c6c-ab00-bd7fc8ae6030 ro rootflags=subvol=root nosplash intel_pstate=disable scsi_mod.use_blk_mq=1 intel_iommu=on i915.fastboot=1 -- /etc/crypttab # <target name> <source device> <key file> <options> system UUID=739967f1-9770-470a-a031-8d8b8bcdb350 none luks,discard,keyscript=/etc/cryptroot/system.64.sh -- System Information: Debian Release: buster/sid APT prefers cosmic-proposed APT policy: (500, 'cosmic-proposed'), (500, 'cosmic') Architecture: amd64 (x86_64)
Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#905920: (no subject) Nazar Mokrynskyi <nazar@mokrynskyi.com> - 2018-08-11 20:30 +0200 Bug#905920: marked as done ((no subject)) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-08-11 22:00 +0200
csiph-web