mirrors/emacs
1
Fork 0
mirror of git://git.sv.gnu.org/emacs.git synced 2025-12-06 06:20:55 -08:00
Code Issues Projects Releases Wiki Activity

* movemail.c: Don't grant more read permissions than necessary.

Browse source 
The old 0333 dates back to before we called setuid,
so it was needed back then to ensure user-readability,
but 0377 should suffice now.
This commit is contained in:
Paul Eggert 2013-03-12 18:05:40 -07:00
parent f58afc72bd
commit 9e3edd30c3
2 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
lib-src/movemail.c
View file

@ -380,9 +380,9 @@ main (int argc, char **argv)
if (indesc < 0)
pfatal_with_name (inname);
/* In case movemail is setuid to root, make sure the user can
read the output file. */
umask (umask (0) & 0333);
/* Make sure the user can read the output file. */
umask (umask (0) & 0377);
outdesc = open (outname, O_WRONLY | O_CREAT | O_EXCL, 0666);
if (outdesc < 0)
pfatal_with_name (outname);