[SSSD] [PATCH] IPA: Securely set umask for mkstemp in subdomain provider

Simo Sorce simo at redhat.com
Mon Aug 6 13:56:32 UTC 2012


On Mon, 2012-08-06 at 09:47 -0400, Stephen Gallagher wrote:
> Fixes https://fedorahosted.org/sssd/ticket/1457
> 
> The permissions are later set with chmod() to the final values after
> it's moved to the real filename, so this is safe.

What't the point ?

The default umask is already ok (strict), I asked Jakub to not set/unset
the umask in his last patch exactly because we are going to do a chmod
later anyway.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list