trousers: change permission bits of tcsd.conf to 0644.
tcsd is starting with user root and group root, to read the
configuration from /etc/tcsd. root:root will need read access to
/etc/tcsd.conf. tcsd.conf was owned by tss:tss and have mode 0600, thus
root will need special privileges named dac_override to override POSIX
discretionary access control, which is discouraged from our security
model.
Since our tcsd.conf is distributed through the image, and doesn't
contain sensitive information (key, passphrase, etc). It should be safe
to open the read access to all others.
BUG=chromium:943965
TEST=start tcsd
Change-Id: I56979f5419636e7c7310df740afca2a76ea61bf6
Reviewed-on: https://chromium-review.googlesource.com/1531903
Commit-Ready: Qijiang Fan <fqj@google.com>
Tested-by: Qijiang Fan <fqj@google.com>
Reviewed-by: Andrey Pronin <apronin@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
2 files changed
