Blame 0077-build-switch-the-default-dump-dir-mode-to-0640.patch

3a204fb
From d70f04d50bc65dfd839316dbe2668ff195cf1fef Mon Sep 17 00:00:00 2001
3a204fb
From: Jakub Filak <jfilak@redhat.com>
3a204fb
Date: Tue, 28 Apr 2015 12:49:38 +0200
3a204fb
Subject: [PATCH] build: switch the default dump dir mode to 0640
3a204fb
3a204fb
The 0660 allows root escalations in ABRT. We don't really need to have
3a204fb
the dump directories writable for the group as ABRT processes run under
3a204fb
root. We introduced 0x1 for group with the switch to /var/tmp/abrt
3a204fb
because we thought that we will have ABRT processes run under the user
3a204fb
abrt, but there are no signs that we will ever pursue such a setup.
3a204fb
3a204fb
Related: #1212861
3a204fb
3a204fb
Signed-off-by: Jakub Filak <jfilak@redhat.com>
3a204fb
---
3a204fb
 configure.ac | 4 ++--
3a204fb
 1 file changed, 2 insertions(+), 2 deletions(-)
3a204fb
3a204fb
diff --git a/configure.ac b/configure.ac
3a204fb
index 01d9f83..4f7e504 100644
3a204fb
--- a/configure.ac
3a204fb
+++ b/configure.ac
3a204fb
@@ -282,8 +282,8 @@ AC_PATH_PROG(AUGPARSE, augparse, no)
3a204fb
 
3a204fb
 AC_ARG_WITH([defaultdumpdirmode],
3a204fb
             AS_HELP_STRING([--with-defaultdumpdirmode=OCTAL-MODE],
3a204fb
-                           [Default dump dir mode (default: 0660)]),
3a204fb
-            [], [with_defaultdumpdirmode="0660"])
3a204fb
+                           [Default dump dir mode (default: 0640)]),
3a204fb
+            [], [with_defaultdumpdirmode="0640"])
3a204fb
 AC_SUBST([DEFAULT_DUMP_DIR_MODE], [$with_defaultdumpdirmode])
3a204fb
 
3a204fb
 DUMP_DIR_OWNED_BY_USER=1
3a204fb
-- 
3a204fb
2.1.0
3a204fb