Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 2231 by aripol...@gmail.com: Cookie jar is readable by everyone by default
http://code.google.com/p/reviewboard/issues/detail?id=2231

* NOTE: Do not post confidential information in this bug report. *
*       If you need immediate support, please contact            *
*       reviewbo...@googlegroups.com                             *

What version are you running?
rbtools 3.2

What's the URL of the page containing the problem?


What steps will reproduce the problem?
1. Remove ~/.post-review-cookies.txt
2. Run post-review on a supported repository
3.

What is the expected output? What do you see instead?
I expect that ~/.post-review-cookies.txt is not world-readable by default. I observe that it is world-readable by default, which could be a small security risk if a user's home directory is world-readable (also the default).

--
You received this message because you are subscribed to the Google Groups 
"reviewboard-issues" group.
To post to this group, send email to reviewboard-issues@googlegroups.com.
To unsubscribe from this group, send email to 
reviewboard-issues+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/reviewboard-issues?hl=en.

Reply via email to