Re: world writeable files

["Colm Smyth [RU-Ireland]" <colms ireland sun com>]

I think there's a call to umask(2) passing zero in gconfd; this should be
removed to use the umask set by the user/administrator.

Colm.

>Delivered-To: gconf-list gnome org
>X-Authentication-Warning: icon.labs.redhat.com: hp set sender to hp redhat com 
using -f
>To: Steve Fox <drfickle k-lug com>
>Cc: gconf-list gnome org
>Subject: Re: world writeable files
>From: Havoc Pennington <hp redhat com>
>User-Agent: Gnus/5.0807 (Gnus v5.8.7) Emacs/20.7
>MIME-Version: 1.0
>X-BeenThere: gconf-list gnome org
>X-Loop: gconf-list gnome org
>X-Mailman-Version: 2.0beta5
>List-Id: Discussion of the GConf library <gconf-list.gnome.org>
>
>
>Steve Fox <drfickle k-lug com> writes:
>> 
>> I noticed that Nautilus was generating world-writeable files (the
>> Mandrake msec security tool reported it). Darin Adler on the Nautilus
>> list thought this is handled by GConf and there I should mention it here.
>> 
>... 
>> Any plans to fix this soon? Thanks.
>> 
>
>Yes, certainly. I believe GConf is supposed to use the permissions you
>have set for ~/.gconf for the subdirectories thereof. So it must be
>buggy in that respect.
>
>Can you send me the complete ls -l output on some of those files, and
>on ~/.gconf, so I can see what it's up to?
>
>Havoc
>
>
>_______________________________________________
>gconf-list mailing list
>gconf-list gnome org
>http://mail.gnome.org/mailman/listinfo/gconf-list