On Tue, 09.11.10 16:35, David Zeuthen ([email protected]) wrote:

> 
> Hey,
> 
> On Sat, Nov 6, 2010 at 6:03 PM, Lennart Poettering <[email protected]> wrote:
> > - It is owned by the user and the user is the only one having write
> > access to it
> 
> Your current proposal allows an implementation where other users can
> read or enumerate the directory. This is bad. Please require e.g. mode
> 0700.

Yes, 0700 is what we should be using, in particular to allow people to
use file locks safely.

In fact systemd already generates this directory 0700.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.
_______________________________________________
xdg mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/xdg

Reply via email to