[issue14984] netrc module allows read of non-secured .netrc file

2013-10-09 Thread bruno Piguet
bruno Piguet added the comment: I apologise for coming back to this issue lately, after its closing. I must have misconfigured something in my tracking system. Thank-you everybody for the work done, especiallly the careful handling and documenting of the case "only if password is prese

[issue14984] netrc module allows read of non-secured .netrc file

2013-09-08 Thread bruno Piguet
Changes by bruno Piguet : -- versions: +Python 3.2 ___ Python tracker <http://bugs.python.org/issue14984> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue14984] netrc module allows read of non-secured .netrc file

2013-09-08 Thread bruno Piguet
bruno Piguet added the comment: I missed the 3.3 window, may I re-propose the same minimal patch against 3.4.0a1 ? I'm not sure I follow any python standard lib coding style but the general idea is quite simple and easy to get. I chose to ignore the backward compatibility concern, si

[issue14984] netrc module allows read of non-secured .netrc file

2012-06-09 Thread bruno Piguet
bruno Piguet added the comment: Do you agree that the attached patch could be a practical solution ? The patch is for the 2.6 version of the lib. Transposition to other versions should be trivial. If we don't want to break backward compatibility, the solution is to add a optional beh

[issue14984] netrc module allows read of non-secured .netrc file

2012-06-02 Thread bruno Piguet
Changes by bruno Piguet : -- title: netrc module alows read of non-secured .netrc file -> netrc module allows read of non-secured .netrc file ___ Python tracker <http://bugs.python.org/issu

[issue14984] netrc module alows read of non-secured .netrc file

2012-06-02 Thread bruno Piguet
New submission from bruno Piguet : Most FTP clients require that the .netrc file be owned by the user and readable/writable by nobody other than the user (ie. permissions set to 0400 or 0600). The netrc module doesn't do this kind of checking, allowing the use a .netrc file writt