]] Andrey Bondarenko 

> pam_tmpdir creates /tmp/user with strict permissions (drwx--x--x root:root)
> Some programs report unwanted permission denied errors while walking from 
> temporary file in $TMP to /. For example error appears in gwenview.

That sounds like a bug in gwenview; why would it try to walk the tree?

> Is there are good reason for removing world readable permissions from 
> /tmp/user
> by default? If defaults cannot be changed, is it possible to make it 
> configurable
> option so local administrator can decide what permissions use for /tmp/user?

If you precreate the directory before pam_tmpdir is invoked, the
permissions aren't changed.  Note that  o+r is fine, but o+w is not and
will lead to PAM failures, so you probably want to make pam_tmpdir as
optional while playing around.

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are

Reply via email to