[
https://issues.apache.org/jira/browse/TS-2421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14284550#comment-14284550
]
ASF subversion and git services commented on TS-2421:
-----------------------------------------------------
Commit 81e843f789d7e4ac9d473edf084184da77e67cce in trafficserver's branch
refs/heads/master from [~zwoop]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=81e843f ]
[TS-2421] MultiCache could theoretically create world-writeable
files. This is masked (pun intended) by system default umask's.
> HostDB creates files FOR THE DEVIL
> ----------------------------------
>
> Key: TS-2421
> URL: https://issues.apache.org/jira/browse/TS-2421
> Project: Traffic Server
> Issue Type: Bug
> Components: DNS, Security
> Reporter: Igor Galić
> Assignee: Leif Hedstrom
> Labels: compatibility
> Fix For: 5.3.0
>
>
> from iocore/hostdb/MultiCache.cc:
> {code}
> // XXX: Shouldn't that be 0664?
> //
> if ((fd =::open(p, O_CREAT | O_WRONLY | O_TRUNC, 0666)) >= 0) {
> {code}
> Yes. Yes it should.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
