Bug 23778

Summary:	Passwords are world-readable
Product:	Telepathy	Reporter:	Vincent Untz <vuntz>
Component:	mission-control	Assignee:	Simon McVittie <smcv>
Status:	RESOLVED FIXED	QA Contact:	Telepathy bugs list <telepathy-bugs>
Severity:	blocker
Priority:	highest
Version:	unspecified
Hardware:	Other
OS:	All
URL:	http://git.collabora.co.uk/?p=user/smcv/telepathy-mission-control-smcv.git;a=shortlog;h=refs/heads/52-permissions
Whiteboard:
i915 platform:		i915 features:

Description Vincent Untz 2009-09-07 08:33:05 UTC

~/.mission-control/accounts/accounts.cfg is readable by everyone (and the directories are rx for everybody).

This means everybody can read your passwords.

Comment 1 Simon McVittie 2009-09-07 08:36:32 UTC

Fixing that now.

Comment 2 Simon McVittie 2009-09-07 09:26:26 UTC

Workaround: `chmod 0700 ~/.mission-control` and/or `chmod 0700 ~/.mission-control/accounts`, or run MC with umask 077.

Current MC will lose the correct permissions of accounts.cfg every time it writes that file (and reset them to 0644), but chmod'ing the directories should work fine.

Comment 3 Simon McVittie 2009-09-07 10:23:58 UTC

review+ from wjt, fixed in git, and in 5.2.2 shortly.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.