Re: dracut creates non-world readable initramfs images

[Daniel Kahn Gillmor <dkg () fifthhorseman net>]

On 09/27/2012 05:07 AM, Huzaifa Sidhpurwala wrote:
> Hi All,
>
> An information disclosure flaw was found in the way dracut, an
> initramfs root filesystem images generator, created initramfs images.
>
> When the root filesystem contained sensitive information (password
> based authentication for iSCSI systems or encrypted root filesystem
> crypttab password information), an attacker could use this flaw to
> obtain this information.
>
> This issue has been assigned CVE-2012-4453

the subject line says "creates non-world readable initramfs images".
should that be "creates world-readable initramfs images" instead?

        --dkg