summaryrefslogtreecommitdiff
path: root/debian/po/kk.po
diff options
context:
space:
mode:
authorTyler Hicks <tyhicks@canonical.com>2017-04-21 00:43:29 +0000
committerTyler Hicks <tyhicks@canonical.com>2017-04-21 00:43:29 +0000
commit35ba272c86f5d5cd625725c10d8494e606bfb938 (patch)
tree08b1a8f9e7e8f7cd3f2e9d400de167d59c62bef2 /debian/po/kk.po
parent684462312d2f1cb47abe54ec06dee6f9b6a30825 (diff)
downloadlightdm-git-35ba272c86f5d5cd625725c10d8494e606bfb938.tar.gz
Explicitly set file mode when creating guest home directory
The fix for CVE-2017-7358 (bzr commit 2478) adjusted the guest home directory creation to use mkdir in some instances. In those instances, the home directory is world readable for a short amount of time before tmpfs is mounted on top of the directory with a 700 file mode. There is no information leak here since data isn't written to the directory before the tmpfs mount occurs but it is best to ask mkdir to set the file mode to 700 from the start. Thanks to Alexander Peslyak (Solar Designer) for catching this mistake.
Diffstat (limited to 'debian/po/kk.po')
0 files changed, 0 insertions, 0 deletions