[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug #57766] Remove group-write permission from ~/.wget-hsts file
|
From: |
Tim Ruehsen |
|
Subject: |
[bug #57766] Remove group-write permission from ~/.wget-hsts file |
|
Date: |
Fri, 7 Feb 2020 13:31:35 -0500 (EST) |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:74.0) Gecko/20100101 Firefox/74.0 |
Update of bug #57766 (project wget):
Status: None => Invalid
Assigned to: None => rockdaboot
Open/Closed: Open => Closed
_______________________________________________________
Follow-up Comment #1:
We use POSIX fopen(fname, "w"). The file permissions are masked by your umask
setting.
>From the man page of fopen:
Any created file will have the mode S_IRUSR | S_IWUSR | S_IRGRP |
S_IWGRP | S_IROTH | S_IWOTH (0666), as modi‐
fied by the process's umask value (see umask(2)).
So if you are concerned about security, the umask is the first thing to check
and adjust.
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/bugs/?57766>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/