New submission from bruno Piguet <bruno.pig...@gmail.com>:

Most FTP clients require that the .netrc file be owned by the user and 
readable/writable by nobody other than the user (ie. permissions set to 0400 or 
0600).
The netrc module doesn't do this kind of checking, allowing the use a .netrc 
file written or modified by somebody else.

----------
messages: 162132
nosy: bruno.Piguet
priority: normal
severity: normal
status: open
title: netrc module alows read of non-secured .netrc file
versions: Python 2.6

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue14984>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to