[Adduser-devel] Bug#430637: Bug#430637: adduser: Incorrect mode when deluser generate archives

[Joerg Hoh]

Package: adduser
Tags: fixed-in-svn

Hi Vincent

On Tue, Jun 26, 2007 at 10:25:23AM +0200, Vincent Danjean wrote:
> Package: adduser
> Version: 3.103
> Severity: important
> Tags: patch
> 
> When generating a archive (BACKUP = 1) with deluser, the perl program
> set the umask to 600 (decimal number, = 01130 in octal) instead of 0600
> (octal number). This lead to an archive with the permissions set to
> ---x-wx--T
> 
> You must change the "chmod 600" to "chmod 0600" in /usr/sbin/deluser
>
> I set the severity to important because this can have security issues
> (but I'm not sure of that)

Fixed in subversion. Thank you for reporting this issue.

Jörg


-- 
What did you do to the cat? It looks half-dead. -Schroedinger's wife
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/adduser-devel/attachments/20070626/5f9d2f72/attachment.pgp