Blame SOURCES/0134-build-switch-the-default-dump-dir-mode-to-0640.patch

28bab8
From c962918bc70a61a8cc647898ee8b1ff1c14a87c5 Mon Sep 17 00:00:00 2001
28bab8
From: Jakub Filak <jfilak@redhat.com>
28bab8
Date: Tue, 28 Apr 2015 12:49:38 +0200
28bab8
Subject: [LIBREPORT PATCH] build: switch the default dump dir mode to 0640
28bab8
28bab8
The 0660 allows root escalations in ABRT. We don't really need to have
28bab8
the dump directories writable for the group as ABRT processes run under
28bab8
root. We introduced 0x1 for group with the switch to /var/tmp/abrt
28bab8
because we thought that we will have ABRT processes run under the user
28bab8
abrt, but there are no signs that we will ever pursue such a setup.
28bab8
28bab8
Related: #1212861
28bab8
28bab8
Signed-off-by: Jakub Filak <jfilak@redhat.com>
28bab8
---
28bab8
 configure.ac | 4 ++--
28bab8
 1 file changed, 2 insertions(+), 2 deletions(-)
28bab8
28bab8
diff --git a/configure.ac b/configure.ac
28bab8
index df88240..8aea410 100644
28bab8
--- a/configure.ac
28bab8
+++ b/configure.ac
28bab8
@@ -249,8 +249,8 @@ AC_PATH_PROG(AUGPARSE, augparse, no)
28bab8
 
28bab8
 AC_ARG_WITH([defaultdumpdirmode],
28bab8
             AS_HELP_STRING([--with-defaultdumpdirmode=OCTAL-MODE],
28bab8
-                           [Default dump dir mode (default: 0660)]),
28bab8
-            [], [with_defaultdumpdirmode="0660"])
28bab8
+                           [Default dump dir mode (default: 0640)]),
28bab8
+            [], [with_defaultdumpdirmode="0640"])
28bab8
 AC_SUBST([DEFAULT_DUMP_DIR_MODE], [$with_defaultdumpdirmode])
28bab8
 
28bab8
 DUMP_DIR_OWNED_BY_USER=1
28bab8
-- 
28bab8
1.8.3.1
28bab8