[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#767390: Bug#767248: dbconfig-common: removes any permissions from generated include files on upgrade



On Fri, Oct 31, 2014 at 12:59:06 +0100, Dominik George wrote:

> 
> > mktemp is supposed to be secure, catting into a yet non-existing file
> > may not. Paul 
> 
> mktemp is safe in that it uses unique file names. Apart from that it
> adheres to the effective user and effective umask, making it no more and
> no less safe than any other operation creating files.
> 
That's not true.  It creates files 0600 (minus umask).  Pretty much any
other operation creating files uses 0666 (minus umask).

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature


Reply to: