[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [PATCH master f15-branch] crypttab should not be work-readable (#692254).



> Under normal installer conditions this works fine, but if the storage
> module ends up being used by something outside anaconda there is a race
> condition for access to the file. It would probably be safer to do:
> 
> origmask = os.umask(0077)
> open(crypttab_path, "w").write(crypttab)
> os.umask(origmask)
> 
> so that the file never exists with world readable permissions.

Changed.

- Chris


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]