fresh ufw install - WARN /etc/ufw/rules... are world readable (T6243)

Eric S. (#eric-salo), 2018-04-20 10:45:12 UTC

ufw only complains about it when it resets, which barely anyone does.

 thinkpad in ~
○ → ls -l /etc/ufw
total 48
-rw-r--r-- 1 root root  915 Feb  1  2017 after6.rules
-rw-r--r-- 1 root root 1126 Feb  1  2017 after.init
-rw-r--r-- 1 root root 1004 Feb  1  2017 after.rules
drwxr-xr-x 2 root root 4096 Apr 20 06:17 applications.d
-rw-r--r-- 1 root root 6449 Feb  1  2017 before6.rules
-rw-r--r-- 1 root root 1130 Feb  1  2017 before.init
-rw-r--r-- 1 root root 2667 Feb  1  2017 before.rules
-rw-r--r-- 1 root root 1941 Feb  1  2017 sysctl.conf
-rw-r--r-- 1 root root  312 Feb  1  2017 ufw.conf
-rw-r--r-- 1 root root  107 Feb  1  2017 user6.rules
-rw-r--r-- 1 root root  307 Feb  1  2017 user.rules

 thinkpad in ~
○ → sudo ufw reset
Resetting all rules to installed defaults. Proceed with operation (y|n)? y
Backing up 'user.rules' to '/etc/ufw/user.rules.20180420_061904'
Backing up 'after6.rules' to '/etc/ufw/after6.rules.20180420_061904'
Backing up 'user6.rules' to '/etc/ufw/user6.rules.20180420_061904'
Backing up 'before6.rules' to '/etc/ufw/before6.rules.20180420_061904'
Backing up 'after.rules' to '/etc/ufw/after.rules.20180420_061904'
Backing up 'before.rules' to '/etc/ufw/before.rules.20180420_061904'
WARN: '/etc/ufw/user.rules' is world readableWARN: '/etc/ufw/after6.rules' is world readableWARN: '/etc/ufw/user6.rules' is world readableWARN: '/etc/ufw/before6.rules' is world readableWARN: '/etc/ufw/after.rules' is world readableWARN: '/etc/ufw/before.rules' is world readable

Reproduce the report with sudo ufw reset after a fresh install, then inspect the /etc/ufw files listed in the issue, including user.rules, after.rules, before.rules, and their IPv6 variants. Done means the reset no longer emits world-readable warnings and the installed files have appropriate permissions.