Bug#433338: security vulnerability on /tmp/screen-exchange

2007-08-07 Thread Jan Christoph Nordholz
severity 48 normal tags 48 + pending thankyou Hi Benoit, I don't like the idea of a default buffer file with mode 0666 *at all* - I am therefore completely disabling the special-casing of /tmp/screen-exchange. The usual use case of this file will still work, depending on the umask of the

Bug#433338: security vulnerability on /tmp/screen-exchange

2007-07-16 Thread Adam Lazur
severity wishlist tags upstream thanks Benoit Friry ([EMAIL PROTECTED]) said: > When using screen-exchange for copy-and-paste, the default file is > /tmp/screen-exchange, created with 666 access right (whatever is the > umask). It may be smart to warn the user that the data saved in the > file is

Bug#433338: security vulnerability on /tmp/screen-exchange

2007-07-16 Thread Benoit Friry
Package: screen Version: 4.0.3-0.3 Severity: normal Hi, When using screen-exchange for copy-and-paste, the default file is /tmp/screen-exchange, created with 666 access right (whatever is the umask). It may be smart to warn the user that the data saved in the file is available to everyone, chang