bug#12947: [brl...@debian.org: Bug#598018: install: temporary insecure file permissions]

2012-11-21 Thread Bernhard Voelker
On November 21, 2012 at 3:12 AM Paul Eggert wrote: > I pushed this [...] This is more of a question, and I may be wrong, but isn't here still a race afterwards? execve("src/ginstall", ["src/ginstall", "-g", "video", "-m", "664", "src/ginstall", "/tmp/g"], ...) = 0 ... stat("src/gi

bug#12947: [brl...@debian.org: Bug#598018: install: temporary insecure file permissions]

2012-11-21 Thread Paul Eggert
On 11/21/2012 02:27 AM, Bernhard Voelker wrote: > Why aren't we using fchown and > fchmod_or_lchmod before the close() call? The code used to do that, if memory serves, but then the code was modified to deal with ACLs or SELinux or whatever and it turned into a big mess, which I've been afraid to

bug#12954: Differences between 'su' version give different results

2012-11-21 Thread ybronhei
Differences between 'su' version give different results in the following shell script: # !/bin/sh func() { su user > /dev/null 2>&1 << EOF echo >> /tmp/b EOF } if func; then echo "access" else echo "no access" fi over fedora 17 I run - coreutils 8.15-8: if the file is not accessible by

bug#12954: Differences between 'su' version give different results

2012-11-21 Thread Eric Blake
tag 12954 notabug thanks On 11/21/2012 09:07 AM, ybronhei wrote: > Differences between 'su' version give different results in the following > shell script: > over fedora 17 I run - coreutils 8.15-8: if the file is not accessible > by user the script prints no access, and the other way around. > o