[Rpm-maint] [PATCH] rpmio: Set a umask before using mkstemp()

Panu Matilainen pmatilai at laiskiainen.org
Tue Oct 11 10:29:02 UTC 2011


On 09/30/2011 01:04 PM, Mukund Sivaraman wrote:
> This commit sets a restrictive umask before calling mkstemp().
> This is because the permissions of files created by mkstemp() are
> not defined in POSIX. Old versions of glibc created files with
> mode 0666 which can be a security hole. Because the behavior is
> implementation-dependent, we set a umask.

Makes sense - applied, thanks for the patch.

	- Panu -


More information about the Rpm-maint mailing list