[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug #57766] Remove group-write permission from ~/.wget-hsts file

From: Tim Ruehsen
Subject: [bug #57766] Remove group-write permission from ~/.wget-hsts file
Date: Fri, 7 Feb 2020 13:31:35 -0500 (EST)
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:74.0) Gecko/20100101 Firefox/74.0

Update of bug #57766 (project wget):

                  Status:                    None => Invalid                
             Assigned to:                    None => rockdaboot             
             Open/Closed:                    Open => Closed                 


Follow-up Comment #1:

We use POSIX fopen(fname, "w"). The file permissions are masked by your umask

>From the man page of fopen:
       Any created file will have the mode S_IRUSR | S_IWUSR | S_IRGRP |
S_IWGRP | S_IROTH | S_IWOTH (0666), as modi‐
       fied by the process's umask value (see umask(2)).

So if you are concerned about security, the umask is the first thing to check
and adjust.


Reply to this item at:


  Message sent via Savannah

reply via email to

[Prev in Thread] Current Thread [Next in Thread]