On 10/04/2015 09:39 PM, Jakub Hrozek wrote:
Finally, because I'm a lazy reviewer, I would prefer:
- a patch that converts 0177 to DFL, with a comment around the macro
definition that this is the default secure umask
- a patch that converts 0077 to DFL_X, with a comment around DFL_X
definition that unless executable bit is explicitly needed, DFL
should be used
- a patch per change if we need to tighten the existing umasks
further.
Hi Jakub,
I put more care and expanded review of umask in several patches.
Patch 0005-P11-CHILD-NSS was discussed with Sumit (thanks).
I'd like to ask about any special care at patch 0010-KRB5-CHILD.
I investigated it, but second look will be better.
Regards
Petr