Package: messagewall
Version: 1.0.8-3
Severity: normal

Messagewallctl doesn't care about permissions/owner when creating files. That
causes the umask to be responsible for any rights that get assigned to the
file and if root calles messagewallctl, the files are owned by root.

Here I run into the following problem:
root has umask 0077.
I do "messagewallctl add-auth-user someone secret"
Now messagewall has recreated the relay_auth file and the file is owned by
root and unreadable for anyone else.
Now messagewall crashes, because it is unable to read relay_auth.

I tried as a workaround to set the sgid-bit for the directory the
relay_auth is in, but because of the umask it is still unreadable for the
group mwall.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.29-cipsc
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages messagewall depends on:
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libfiredns0.9               0.9.12-1     Runtime libraries for firedns, an 
ii  libfirestring0.9            0.9.12-1     Runtime libraries for firestring, 
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries

-- debconf-show failed


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to