My Oracle Support Banner

Msconfig Saves The Old xpass.xml With 0640 Permissions (Doc ID 2318366.1)

Last updated on MARCH 19, 2019

Applies to:

Oracle Communications Messaging Server - Version 8.0.1 and later
Information in this document applies to any platform.


Msconfig (sometimes) saves the old xpass.xml with 0640.

The xpass.xml file has the correct permissions:

host:/opt/sun/comms/messaging64/config$ ls -l *xml
-rw------- 1 mailsrv mail 39153 Sep 26 11:10 config.xml
-rw------- 1 mailsrv mail 1304 Sep 26 11:10 xpass.xml

But it looks like msconfig does not actively manage the permissions on the copy it saves in old-configs:

host:/opt/sun/comms/messaging64/config$ ls -alrt old-configs/xpass.xml-201* | awk '{print $1}' | sort | uniq -c
  27 -rw-------
  73 -rw-r-----

The issue can be worked around by including a chmod after any changes are performed, but this should be corrected.  Password info should not be readable by anyone, other than root and the owner.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.