>>>>> "Scott" == Scott Gifford <[EMAIL PROTECTED]> writes:
    Scott> Michael Richardson <[EMAIL PROTECTED]> writes:

    >> >>>>> "Torsten" == Torsten Landschoff <[EMAIL PROTECTED]> writes:

    Torsten> What do you think? I wanted to attach a simple patch but
    Torsten> since fopen is used for opening the file and since there
    Torsten> is a windows port of libpcap it is not quite that
    Torsten> easy. One could as well invoke umask in tcpdump's main if
    Torsten> available.

    >> I suggest:
    >> 
    >> #if UNIX
    >> if(getuid()==0 || geteuid()!=getuid()) { /* or some other appropriate 
variation*/
    >> umask(022);
    >> }
    >> #endif

    Scott> I don't think it's ever appropriate to make a user's umask *more*
    Scott> permissive without letting them override it.  To just make it less
    Scott> permissive, something like:

  Sure, that's a better idea.

    Scott> I think the fact that I think a umask of 077 is appropriate and
    Scott> Michael thinks a umask of 022 is appropriate is enough to hint that
    Scott> maybe we should just honor the user's umask after all.

  I am mostly indifferent --- I typically use tcpdump only on my notebook,
and I'm the only user.

] Train travel features AC outlets with no take-off restrictions|gigabit is no[
]   Michael Richardson, Solidum Systems   Oh where, oh where has|problem  with[
]     [EMAIL PROTECTED]   www.solidum.com   the little fishy gone?|PAX.port 1100[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [



-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to