[Mailman-Users] Permission of data/bounce-events-?????.pck

[imacat]

On Tue, 31 Jan 2006 14:17:42 -0800
Mark Sapiro <msapiro at value.net> wrote:
> imacat wrote:
> >    I was checking my system for world-writable files, and found lots of
> >data/bounce-events-?????.pck that are world-writable:
> >imacat at rinse ~ % ls -lt /var/lib/mailman/data | grep 'rw. '
> >-rw-rw-rw-  1 list list       0 2006-01-31 01:26 bounce-events-02258.pck
> >-rw-rw-rw-  1 list list    4786 2005-12-26 17:36 bounce-events-26086.pck
> >=2E..
> >imacat at rinse ~ %d
> But to answer your question, what's the default umask on your system? I
> think that's what controls this.

    Frankly, I got a different test result.

    I put a line "touch /var/tmp/mailman.umask.test" to
/etc/init.d/mailman (which is copied from scripts/mailman) and reboot my
system.  Here is what I got:

imacat at rinse ~ % ls -l /var/tmp/mailman.umask.test
-rw-r--r--  1 root root 0 2006-02-02 02:41 /var/tmp/mailman.umask.test
imacat at rinse ~ % ls -l /var/lib/mailman/data/bounce-events-*.pck
-rw-rw-rw-  1 list list 0 2006-02-02 02:41 /var/lib/mailman/data/bounce-events-02211.pck
imacat at rinse ~ %

    Appreantly the umask when running /etc/init.d/mailman is 0022 but
mailman still create data/bounce-events-?????.pck as 0666.  Or the
python (mailmanctl) uses a different "system default umask", other than
its parent process /etc/init.d/mailman?

    I noted that in the source of mailman 2.1.7 there are 2 lines in
bin/mailmanctl:

line 421-422
        # Clear our file mode creation umask
        os.umask(0)

    Is this intended?  Is it the reason why data/bounce-events-?????.pck
are world-writable?

--
Best regards,
imacat ^_*' <imacat at mail.imacat.idv.tw>
PGP Key: http://www.imacat.idv.tw/me/pgpkey.txt

<<Woman's Voice>> News: http://www.wov.idv.tw/
Tavern IMACAT's: http://www.imacat.idv.tw/
TLUG List Manager: http://lists.linux.org.tw/cgi-bin/mailman/listinfo/tlug
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://mail.python.org/pipermail/mailman-users/attachments/20060202/6c6eb4fc/attachment.pgp