Bug 17308 - world-readable history: ~/.xine/xine-ui_old_playlist.tox
: world-readable history: ~/.xine/xine-ui_old_playlist.tox
Status: CLOSED WONTFIX
: Branch 4.0
(All bugs in Branch 4.0/xine-ui)
: 4.0
: all Linux
: P2 normal
Assigned To:
:
:
:
:
: 17310
  Show dependency tree
 
Reported: 2008-09-24 01:22 by
Modified: 2014-11-05 20:16 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2008-09-24 01:22:35
xine-ui-0.99.5-alt2 from Lite 4.0.3

I assume the conventional policy towards history files is not to make them
world-readable. (Example: ~/.bash_history is not
world-readable.)

But the file ~/.xine/xine-ui_old_playlist.tox which tracks the last played item
is made world-readable:

$ l .xine/xine-ui_old_playlist.tox 
-rw-r--r-- 1 imz imz 107 Сен 24 01:13 .xine/xine-ui_old_playlist.tox
$ 

Proof that it stores bits of history:

$ cat .xine/xine-ui_old_playlist.tox 
# toxine playlist

entry {
    identifier = /WIN/Exped/mvi_0641.avi;
    mrl = /WIN/Exped/mvi_0641.avi;
};
# END
$ 

Expected: it isn't world-readable. Good example: ~/.mc/history is not
world-readable:

$ l .mc
итого 28
drwx------ 28 imz imz 4096 Сен 23 23:15 ../
drwxr-xr-x  3 imz imz 4096 Сен 23 22:56 ./
-rw-r--r--  1 imz imz  353 Сен 23 22:56 filepos
-rw-------  1 imz imz  521 Сен 23 22:56 history
-rw-r--r--  1 imz imz 3433 Сен 23 22:56 ini
-rw-r--r--  1 imz imz   35 Сен 23 22:56 Tree
drwx------  2 imz imz 4096 Авг  1 19:24 cedit/
$
------- Comment #1 From 2008-09-24 01:24:23 -------
Workaround: chmod go-r .xine/xine-ui_old_playlist.tox , the changed permissions
are kept after that.
------- Comment #2 From 2014-11-05 20:16:41 -------
В 4.0/branch исправления не будут вноситься уже технически (заглушена очередь
на сборку), поэтому прошу ошибки, актуальные для sisyphus/p7/t7, перевесить на
текущие ветки или сизиф.