Skip to content
Permalink
Browse files Browse the repository at this point in the history
build: switch the default dump dir mode to 0640
The 0660 allows root escalations in ABRT. We don't really need to have
the dump directories writable for the group as ABRT processes run under
root. We introduced 0x1 for group with the switch to /var/tmp/abrt
because we thought that we will have ABRT processes run under the user
abrt, but there are no signs that we will ever pursue such a setup.

Related: #1212861

Signed-off-by: Jakub Filak <jfilak@redhat.com>
  • Loading branch information
Jakub Filak committed Apr 28, 2015
1 parent 16b2ebd commit c962918
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions configure.ac
Expand Up @@ -249,8 +249,8 @@ AC_PATH_PROG(AUGPARSE, augparse, no)

AC_ARG_WITH([defaultdumpdirmode],
AS_HELP_STRING([--with-defaultdumpdirmode=OCTAL-MODE],
[Default dump dir mode (default: 0660)]),
[], [with_defaultdumpdirmode="0660"])
[Default dump dir mode (default: 0640)]),
[], [with_defaultdumpdirmode="0640"])
AC_SUBST([DEFAULT_DUMP_DIR_MODE], [$with_defaultdumpdirmode])

DUMP_DIR_OWNED_BY_USER=1
Expand Down

0 comments on commit c962918

Please sign in to comment.