Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #947879

Bug#782001: access granted to /home files of another user

Show all headers | View raw

Control: tag -1 + security

I think this problem (having $HOME world-readable by default) should
really be fixed...  In installations sharing $HOME between multiple
users this means private data of all sorts (medical records, unpublished
scientific articles, exam results, ...) can be accessed by /all/ users
by default.  This seems a really bad idea.

Dear security team, should such issues get a CVE id?  If one follows the
link from [1], one should contact the Debian security team to assign one
(even though [1] says Debian won't assign one?).

Ansgar

  [1] https://www.debian.org/security/faq#cveget

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#782001: access granted to /home files of another user Ansgar <ansgar@debian.org> - 2019-03-02 08:20 +0100
  Bug#782001: access granted to /home files of another user Yves-Alexis Perez <corsac@debian.org> - 2019-03-02 13:30 +0100

csiph-web