Package: sudo
Version: 1.6.8p7-1.1
Severity: normal

When sudoedit is invoked on a non-existent file, that file is created
with the gid of the invoking user, as can be seen in the following session:

$ ls -l /etc/nonexistent
ls: /etc/nonexistent: No such file or directory
$ sudoedit /etc/nonexistent
Password:
Waiting for Emacs...Done
$ ls -l /etc/nonexistent
-rw-r--r--  1 root sven 2 Jun 25 07:58 /etc/nonexistent
$

This is probably not what most people want and unintentional, the gid
of the new file should be 0.


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.31
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1)

Versions of packages sudo depends on:
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l

-- no debconf information




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to