This bug, one of file permissions is NOT a duplicate of 472865,
"WARNING: at /build/buildd/linux-2.6.31/kernel/power/suspend_test.c:52
suspend_test_finish+0x80/0x90()" .

In Thunderbird 17.0.2, even with a umask of 022, TB creates directories
with permissions 0775 instead of 0755 and files with 0664 instead of
0644. This leaves directories and files open to tampering by anyone in
the same group, and so is a security vulnerability!

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/810939

Title:
  Thunderbird saves mail as 600 instead of 660 permissions

Status in Mozilla Thunderbird Mail and News:
  Invalid
Status in “thunderbird” package in Ubuntu:
  Triaged

Bug description:
  Thunderbird saves mail as 600 instead of 660 permissions
  -----
  Steps to reproduce:
  Open an email in Thunderbird
  File > Save
  "ls -l" the directory where the email was saved

  Result:
  Email .eml file is saved with 600 (-rw -------)

  Expecting:
  Email .eml file should be saved with 660 (-rw-rw----) as the umask value is 
007
  ==

  ProblemType: Bug
  DistroRelease: Ubuntu 10.10
  Package: thunderbird 3.1.6+build1+nobinonly-0ubuntu0.10.10.1
  ProcVersionSignature: Ubuntu 2.6.35-23.41-generic-pae 2.6.35.7
  Uname: Linux 2.6.35-23-generic-pae i686
  Architecture: i386
  Date: Fri Jul 15 10:48:39 2011
  InstallationMedia: Ubuntu-Server 10.10 "Maverick Meerkat" - Release i386 
(20101007)
  ProcEnviron:
   LANG=fr_FR.utf8
   SHELL=/bin/bash
  SourcePackage: thunderbird

To manage notifications about this bug go to:
https://bugs.launchpad.net/thunderbird/+bug/810939/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to