summaryrefslogtreecommitdiff
path: root/debian
diff options
context:
space:
mode:
authorYves-Alexis Perez <corsac@corsac.net>2017-09-03 14:35:30 +0200
committerYves-Alexis Perez <corsac@corsac.net>2017-09-03 14:35:30 +0200
commit919e729b2b53f68e014f93688e4202c7928312a5 (patch)
treede2e79c9f6bd8d58c58a7985f630e87de50a6b9d /debian
parentef3772494ba19dac499034d4154c9f9babdf9e7a (diff)
downloadvyos-strongswan-919e729b2b53f68e014f93688e4202c7928312a5.tar.gz
vyos-strongswan-919e729b2b53f68e014f93688e4202c7928312a5.zip
add lintian overrides for private keys directories using 700 permissions.
Diffstat (limited to 'debian')
-rw-r--r--debian/changelog3
-rw-r--r--debian/strongswan-swanctl.lintian-overrides6
2 files changed, 9 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 523670ada..e5e71803f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -20,6 +20,9 @@ strongswan (5.6.0-1) UNRELEASED; urgency=medium
closes: #866327
* debian/libcharon-extra-plugins.install:
- install pt-tls-client in /u/b and also install its manpage.
+ * debian/strongswan-swanctl.lintian-overrides:
+ - add lintian overrides for private keys directories using 700
+ permissions.
-- Yves-Alexis Perez <corsac@debian.org> Fri, 01 Sep 2017 17:21:45 +0200
diff --git a/debian/strongswan-swanctl.lintian-overrides b/debian/strongswan-swanctl.lintian-overrides
new file mode 100644
index 000000000..1af6f10d2
--- /dev/null
+++ b/debian/strongswan-swanctl.lintian-overrides
@@ -0,0 +1,6 @@
+# directories for private keys so tighten the permissions
+strongswan-swanctl: non-standard-dir-perm etc/swanctl/bliss/ 0700 != 0755
+strongswan-swanctl: non-standard-dir-perm etc/swanctl/ecdsa/ 0700 != 0755
+strongswan-swanctl: non-standard-dir-perm etc/swanctl/pkcs8/ 0700 != 0755
+strongswan-swanctl: non-standard-dir-perm etc/swanctl/private/ 0700 != 0755
+strongswan-swanctl: non-standard-dir-perm etc/swanctl/rsa/ 0700 != 0755