[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Curious permission problem

From: Ole Laursen
Subject: Re: Curious permission problem
Date: Wed, 17 Feb 2010 15:54:22 +0100

On Wed, Feb 17, 2010 at 3:32 PM, Michael Albinus <address@hidden> wrote:
> Ole Laursen <address@hidden> writes:
>> (defun tramp-default-file-modes (filename)
>>   (tramp-octal-to-decimal "0666"))
> That's a security threat. You might open root owned files from a remote
> server. Everybody can read those file on your local server, from the
> tmp directory.

Yeah. "0600" works too, it seems.

> Maybe we shall add an option to Tramp, that all group and world
> permissions are nuked when copying. So you can decide how to do it.

I personally think it would be good idea to use 600 by default for
security reasons. Can't you keep track of the permissions manually if
you want to be able to deliver them on the remote end with the same
permissions as before? Or am I missing something?

> --8<---------------cut here---------------start------------->8---
> (defun tramp-handle-insert-file-contents
>  (filename &optional visit beg end replace)
>  "Like `insert-file-contents' for Tramp files."

Just tested that, didn't work for me. I get an empty buffer. But I
might need a newer version of Tramp too, I guess.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]