*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Jamie Strandboge 
(jdstrand):
umask is supposed to mask away some permission bits.

In fuse, the umask parameter instead overrides all permission bits.

Overriding the permissions from the file system itself might be a useful
feature - but it should not be named umask.

I have attached a patch that fixes the behavior of umask. It may be
desireable to also add a uoverride or such parameter to emulate the
current umask behavior when applying the patch.

I have also checked the security vulnerability checkbox, because in my
case, for example, the umask allows write access when it shouldn't, and
avoiding umask allows many permissions that should not be allowed.

** Affects: fuse (Ubuntu)
     Importance: Undecided
         Status: New

-- 
fuse does not handle umask correctly
https://bugs.launchpad.net/bugs/239792
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to