raspbian-ua-netinst.log, bad permissions

[Lo0k]

Hello,

Once installation is complete, the logfile is moved to /var/log/raspbian-ua-netinst.log.
However, if this logfile is not removed by the administrator, it can be viewed by all users :

$ ls -l /var/log/raspbian-ua-netinst.log -rw-r--r-- 1 root root 40486 Sep 10 18:12 raspbian-ua-netinst.log

Can you add a call to chmod 0640 before the final reboot ?
This will avoid the leak of rootpw.

Tony B.

[diederikdehaas]

Wow, that's quite a big oversight on my part! Thanks for reporting it 👍