[Pkg-kde-extras] Bug#806500: quassel-client: Client configuration is world readable and contains password in plain text

Diederik de Haas didi.debian at cknow.org
Sat Nov 28 21:14:23 UTC 2015


On Saturday 28 November 2015 23:57:38 Boris Pek wrote:
> This is a wrong assumption, just look at directory access permissions:
> 
> $ LC_ALL=C ls -alp ~/.config/ | grep '\./'
> drwx------  96 user user   4096 Nov 28 23:44 ./
> drwx------ 192 user user  12288 Nov 28 22:39 ../

Mine are not the same:

diederik at bagend:~$ LC_ALL=C ls -alp ~/.config/ | grep '\./'
drwxr-xr-x 45 diederik diederik  4096 Nov 28 19:29 ./
drwxr-x--- 68 diederik diederik 12288 Nov 28 17:59 ../
diederik at bagend:~$ ls -ld ~/.config/
drwxr-xr-x 45 diederik diederik 4096 nov 28 19:29 /home/diederik/.config/
diederik at bagend:~$ ls -ld ~/.config/quassel-irc.org/
drwxr-xr-x 2 diederik diederik 4096 nov 28 11:10 /home/diederik/.config/quassel-irc.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20151128/6392c5ab/attachment.sig>


More information about the pkg-kde-extras mailing list