Hi David,

On Tue, 13 Oct 2009, Ian Zimmerman wrote:

> When paperkey is given the -o flag and the output file doesn't already
> exist, it is created with normal permissions - (644).  This is clearly
> bad.  It would be OK to just mention in the manpage so I can either
> pre-create the file or set my umask before running paperkey, but it
> does need to be pointed out.

It appears paperkey creates the output file with permissions only
constrained by the user's umask.

I agree with Ian here that it might be prudent to create the file with
go-rwx.  (I think that's preferable to just documenting the fact that
files are world readable.)

If you concur and want a patch I can probably supply one.

Cheers,
Peter
-- 
                           |  .''`.  ** Debian GNU/Linux **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to