*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: nautilus

TEST CASE:
1. Launch nautilus
2. Copy user directory to other location (e.g. /tmp)
3. Skip "special files" which cannot be copied (nautilus pop-up dialogues)
4. Check permissions of user's folder

Result: user directory permissions is changed to 777 (drwxrwxrwx user:user)
Expected behaviour: user directory permissions should be unchanged (755, 
drwxr-xr-x user:user)
(To revert, simply use "chmod 755 ~")

Another side-effect of this is that on startup, gnome(?) gives an error
about the .drmc file and permissions (although it does only complain at
that file not being 644 [which it IS])

I'm flagging this as a security vulnerability since this allows unwanted
write access to user's directory.

** Affects: nautilus (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

-- 
Permissions on user home directory set to 777 after copying it via nautilus
https://bugs.launchpad.net/bugs/418135
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to