Bug#682704: written dumps shouldn't be world-readable by default

2012-07-25 Thread Romain Francoise
Hi Michael, Michael Stummvoll mich...@stummi.org writes: files created with tcpdump (tcpdump -w file.pcap) are world readable by default. (mode 644) ... if your umask is not strict enough, yes. You can use a umask of 077 to prevent this. tcpdump (actually libpcap) could set things up by

Bug#682704: written dumps shouldn't be world-readable by default

2012-07-25 Thread Michael Stummvoll
Hi Romain, Am Wed, 25 Jul 2012 15:59:21 +0200 schrieb Romain Francoise rfranco...@debian.org: ... if your umask is not strict enough, yes. You can use a umask of 077 to prevent this. Hi, thanks for your reply. I think you are right with your points. I didn't saw the old bugreport. Thanks for

Bug#682704: written dumps shouldn't be world-readable by default

2012-07-24 Thread Michael Stummvoll
Package: tcpdump Severity: wishlist Tags: security Hi maintainers, files created with tcpdump (tcpdump -w file.pcap) are world readable by default. (mode 644) I think, due this files may contain sensitive data (and the possibility for this isn't very small imho), newly created dumpfiles