[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20171105171704.GA9438@256bit.org>
Date: Sun, 5 Nov 2017 18:17:04 +0100
From: Christian Brabandt <cb@...bit.org>
To: oss-security@...ts.openwall.com
Subject: Re: Fw: Security risk of vim swap files
On Fr, 03 Nov 2017, Jakub Wilk wrote:
> In general, what vim does (copying mode bits) in not enough to ensure that
> the swapfile is readable only by the users who had access to the original
> file. It would have to copy also group ownership and ACLs.
I think patch https://github.com/vim/vim/releases/tag/v8.0.1263 fixes
the group ownership problem.
Christian
--
Advokaten, die Bratenwender der Gesetze, die so lange die Gesetze
wenden und anwenden, bis ein Braten für sie abfällt.
-- Heinrich Heine
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
