[mICQ] Checking permissions on micqrc file, etc
Pavel Sanda
ps at twin.jikos.cz
Fri Aug 3 00:33:20 CEST 2007
> On Fri, Jul 20, 2007 at 01:13:59AM +0200, Pavel Sanda wrote:
> > Hello,
> >
> > 1) I would like to propose one enhacenment to micq :
> > it happened to me few times that micqrc file got og+r permissions
> > which is not good thing considering that you can have password
> > saved there.
> > There could be some check during initialization of micq, that this
> > file is not world readable and warn the user or even change it
> > by default...
> > Something similar applies to contact and history directories...
>
> I would suggest checking this in a wrapper script instead.
> Or maybe even a helper.
this is not enough. i found out that even if you set these permissions
correctly, every saving of preferences change permissions back to your
default umask. the same stands for some otr file, which should be
probably also secure...
so only checking is not enough - these permissions must be set correctly
when saving preferences etc...
pavel
More information about the mICQ-List
mailing list