Bug#167422: general: files in /usr/share should be world-readable

2002-11-10 Thread Robert Bihlmeyer
[EMAIL PROTECTED] (Thomas Bushnell, BSG) writes: This is incorrect. /usr/share is intended to be shared between cooperating systems, but cooperating systems' root users might well have secrets that they want to conveniently share. /usr/share is not appropriate for that, as it is the OS's

Bug#167422: general: files in /usr/share should be world-readable

2002-11-10 Thread Thomas Bushnell, BSG
Robert Bihlmeyer [EMAIL PROTECTED] writes: [EMAIL PROTECTED] (Thomas Bushnell, BSG) writes: This is incorrect. /usr/share is intended to be shared between cooperating systems, but cooperating systems' root users might well have secrets that they want to conveniently share. /usr/share

Bug#167422: files in /usr/share should be world-readable

2002-11-10 Thread Julian Gilbey
On Fri, Nov 08, 2002 at 09:15:09PM -0500, James R. Van Zandt wrote: However, I think substituting LOG=`tempfile -m 644` would introduce a security bug. How? Surely tempfile still creates the file securely, even when the mode is other than 600? Julian --