Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1284058

Re: [PATCH v2 1/2] um: Set secure access mode for temporary file

From Tristan Schmelcher <tschmelcher@google.com>
Newsgroups linux.kernel
Subject Re: [PATCH v2 1/2] um: Set secure access mode for temporary file
Date 2015-12-04 18:20 +0100
Message-ID <qC2bw-5CT-17@gated-at.bofh.it> (permalink)
References <qAaPU-7a0-3@gated-at.bofh.it> <qAaPV-7a0-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


File permissions are checked at time of open, so I think this fchmod
call has never had any effect.

If there is a concern that the mkstemp implementation may be insecure,
why not set and restore the umask?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | NextNext in thread | Find similar | Unroll thread


Thread

Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Tristan Schmelcher <tschmelcher@google.com> - 2015-12-04 18:20 +0100
  Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Mickaël Salaün <mic@digikod.net> - 2015-12-06 13:00 +0100
  Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Mickaël Salaün <mic@digikod.net> - 2015-12-06 13:20 +0100
    Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Mickaël Salaün <mic@digikod.net> - 2015-12-06 16:00 +0100
      Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Tristan Schmelcher <tschmelcher@google.com> - 2015-12-08 21:40 +0100
        Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Richard Weinberger <richard@nod.at> - 2015-12-08 22:50 +0100
          Re: [PATCH v2 1/2] um: Set secure access mode for temporary file Mickaël Salaün <mic@digikod.net> - 2015-12-10 01:00 +0100

csiph-web