On Wed, Feb 17, 2010 at 3:32 PM, Michael Albinus <[email protected]> wrote: > Ole Laursen <[email protected]> writes: > >> (defun tramp-default-file-modes (filename) >> (tramp-octal-to-decimal "0666")) > > That's a security threat. You might open root owned files from a remote > server. Everybody can read those file on your local server, from the > tmp directory.
Yeah. "0600" works too, it seems. > Maybe we shall add an option to Tramp, that all group and world > permissions are nuked when copying. So you can decide how to do it. I personally think it would be good idea to use 600 by default for security reasons. Can't you keep track of the permissions manually if you want to be able to deliver them on the remote end with the same permissions as before? Or am I missing something? > --8<---------------cut here---------------start------------->8--- > (defun tramp-handle-insert-file-contents > (filename &optional visit beg end replace) > "Like `insert-file-contents' for Tramp files." [...] Just tested that, didn't work for me. I get an empty buffer. But I might need a newer version of Tramp too, I guess. Ole _______________________________________________ Tramp-devel mailing list [email protected] http://lists.gnu.org/mailman/listinfo/tramp-devel
