PDM: token secrets file writable by unprivileged API daemon user

Details

The file /etc/proxmox-datacenter-manager/token.shadow keeps the securely hashed token secrets, and needs to be readable by the unprivileged API daemon, running as www-data. The file was also writable by www-data and would thus allow modifications, in case an attacker gained access as www-data due to a different security issue.

The issue is addressed by creating the file with owner root, and changing the ownership for existing installation on upgrade.

Additionally the ownership of the configuration directory /etc/proxmox-datacenter-manager was similarly changed to root as additional future-proofing.

This issue was found internally.

Fixed in

• proxmox-datacenter-manager >= 1.1.9