MongoDB 3.4.2 does not tighten world-readable permissions on pre-existing .dbshell file

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Works as Designed
    • Priority: Major - P3
    • None
    • Affects Version/s: 3.4.2
    • Component/s: Security
    • None
    • ALL
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      After you announced the issue got fixed in SERVER-25335 issue (https://jira.mongodb.org/browse/SERVER-25335), I found the world-readable permissions problem to the .dbshell file still exists in MongoDB 3.4.2, which i have in my network.

      In the issue below, you fixed it on on 3.2 version of MongoDB. Please recheck it.

      Bar

            Assignee:
            Ramon Fernandez
            Reporter:
            Bar Ronen
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: