Mailinglist Archive: opensuse-security-announce (7 mails)

[thomas@xxxxxxx (Thomas Biege)]

Hi,
someone of you told me, that the file perms are to restrictive for
uploaded files.
I send a patch (appendix) to our maintainer, so watch out for a new RPM.

Bye,
     Thomas

--
  Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg
  E@mail: thomas@xxxxxxx      Function: Security Support & Auditing
  "lynx -source http://www.suse.de/~thomas/thomas.pgp ;| pgp -fka"
   Key fingerprint = 09 48 F2 FD 81 F7 E7 98  6D C7 36 F1 96 6A 12 47


--- ftpd.c      Mon Nov 15 16:31:18 1999
+++ ftpd.c.eval Tue Nov 16 15:09:21 1999
@@ -2218,7 +2218,7 @@
         fdout = open(name, open_flags, f_mode);
         umask(oldmask);
     } else
-        fdout = open(name, open_flags, 0640);
+        fdout = open(name, open_flags, 0666);
 
     if (fdout < 0) {
         perror_reply(553, name);