Bug#1004414: systemd-cron: generator turns crontabs public readable

2022-02-01 Thread Alexandre Detiste
This is pointless. Nothing can be done to really improve the situation, as anybody can look around in /proc . Le jeu. 27 janv. 2022 à 04:21, Robert Siemer a écrit : > > Package: systemd-cron > Version: 1.15.18-1 > Severity: normal > Tags: security > X-Debbugs-Cc: robert.siemer-report...@backsla.

Bug#1004414: systemd-cron: generator turns crontabs public readable

2022-01-26 Thread Robert Siemer
Package: systemd-cron Version: 1.15.18-1 Severity: normal Tags: security X-Debbugs-Cc: robert.siemer-report...@backsla.sh, Debian Security Team Crontabs, especially in /var/spool/cron are not readable to all users. Translated command lines in unit files in /run/systemd/generator on the other h