Blame SOURCES/0134-build-switch-the-default-dump-dir-mode-to-0640.patch

4b6aa8
From c962918bc70a61a8cc647898ee8b1ff1c14a87c5 Mon Sep 17 00:00:00 2001
4b6aa8
From: Jakub Filak <jfilak@redhat.com>
4b6aa8
Date: Tue, 28 Apr 2015 12:49:38 +0200
4b6aa8
Subject: [LIBREPORT PATCH] build: switch the default dump dir mode to 0640
4b6aa8
4b6aa8
The 0660 allows root escalations in ABRT. We don't really need to have
4b6aa8
the dump directories writable for the group as ABRT processes run under
4b6aa8
root. We introduced 0x1 for group with the switch to /var/tmp/abrt
4b6aa8
because we thought that we will have ABRT processes run under the user
4b6aa8
abrt, but there are no signs that we will ever pursue such a setup.
4b6aa8
4b6aa8
Related: #1212861
4b6aa8
4b6aa8
Signed-off-by: Jakub Filak <jfilak@redhat.com>
4b6aa8
---
4b6aa8
 configure.ac | 4 ++--
4b6aa8
 1 file changed, 2 insertions(+), 2 deletions(-)
4b6aa8
4b6aa8
diff --git a/configure.ac b/configure.ac
4b6aa8
index df88240..8aea410 100644
4b6aa8
--- a/configure.ac
4b6aa8
+++ b/configure.ac
4b6aa8
@@ -249,8 +249,8 @@ AC_PATH_PROG(AUGPARSE, augparse, no)
4b6aa8
 
4b6aa8
 AC_ARG_WITH([defaultdumpdirmode],
4b6aa8
             AS_HELP_STRING([--with-defaultdumpdirmode=OCTAL-MODE],
4b6aa8
-                           [Default dump dir mode (default: 0660)]),
4b6aa8
-            [], [with_defaultdumpdirmode="0660"])
4b6aa8
+                           [Default dump dir mode (default: 0640)]),
4b6aa8
+            [], [with_defaultdumpdirmode="0640"])
4b6aa8
 AC_SUBST([DEFAULT_DUMP_DIR_MODE], [$with_defaultdumpdirmode])
4b6aa8
 
4b6aa8
 DUMP_DIR_OWNED_BY_USER=1
4b6aa8
-- 
4b6aa8
1.8.3.1
4b6aa8