Bug 17310 - there shouldn't be world-readable history in ~/
Summary: there shouldn't be world-readable history in ~/
Status: CLOSED WONTFIX
Alias: None
Product: Branch 4.0
Classification: Distributions
Component: cross-component (show other bugs)
Version: 4.0
Hardware: all Linux
: P2 normal
Assignee: Nobody's working on this, feel free to take it
QA Contact: Q.A. 4.0
URL:
Keywords:
Depends on: 17306 17307 17308 17309
Blocks:
  Show dependency tree
 
Reported: 2008-09-24 01:49 MSD by Ivan Zakharyaschev
Modified: 2014-11-05 20:16 MSK (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ivan Zakharyaschev 2008-09-24 01:49:14 MSD
I noticed that several programs in Lite 4.0.3 store their history world-readable.

I assume that the conventional policy towards history files is not to make them world-readable. (Example: ~/.bash_history is not
world-readable.)

Expected: any program stores by default its history not world-readable. 

This report tracks individual bug reports with this concern for different programs: it depends on them.

Another good example: ~/.mc/history is not world-readable:

$ l .mc
итого 28
drwx------ 28 imz imz 4096 Сен 23 23:15 ../
drwxr-xr-x  3 imz imz 4096 Сен 23 22:56 ./
-rw-r--r--  1 imz imz  353 Сен 23 22:56 filepos
-rw-------  1 imz imz  521 Сен 23 22:56 history
-rw-r--r--  1 imz imz 3433 Сен 23 22:56 ini
-rw-r--r--  1 imz imz   35 Сен 23 22:56 Tree
drwx------  2 imz imz 4096 Авг  1 19:24 cedit/
$
Comment 1 Michael Shigorin 2014-11-05 20:16:43 MSK
В 4.0/branch исправления не будут вноситься уже технически (заглушена очередь на сборку), поэтому прошу ошибки, актуальные для sisyphus/p7/t7, перевесить на текущие ветки или сизиф.