Psi Jabber Client

See this page for instructions on how to use Flyspray: http://psi-im.org/wiki/Flyspray

Please Note!

Please do not create tasks here without discussing your bug or feature request on the forums or groupchat psi@conference.psi-im.org, *and* getting explicit confirmation by a developer to add it to flyspray.
Tasklist

FS#858 - Bad filesystem permissions of config.xml and history.

Attached to Project: Psi Jabber Client
Opened by VItaly "_Vi" Shukela (_Vi) - Saturday, 28 June 2008, 10:46 GMT-5
Task Type Bug Report
Category Backend/Core
Status Assigned
Assigned To Kevin Smith (kev)
Operating System Linux
Severity Medium
Priority Fluff
Reported Version 0.11
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Psi stores sensitive files (chat history, config.xml with passwords) with inappropopriate permissions:
-rw-r--r-- 1 vi vi 17704 2008-06-28 15:08 /home/vi/.psi/profiles/default/config.xml

xchat or licq stores them with -rw-------, which I should is correct.

I think permission bits should be set explicitly when storing such files to disallow access from group and others.
This task depends upon

View Dependency Graph

This task blocks these from closing
FS#764 - Patch review (META TASK)
Comment by VItaly "_Vi" Shukela (_Vi) - Saturday, 28 June 2008, 19:41 GMT-5
I've created a patch for this.
It changes permissions for directory history, history files and all configuration files to rw------- (rwx------ for directories), ignoring umask.
   psi-chmod.diff (1.2 KiB)

Loading...