Bug 17307

Summary: world-readable history: ~/.gqview/history
Product: Branch 4.0 Reporter: Ivan Zakharyaschev <imz>
Component: gqviewAssignee: Anton Farygin <rider>
Status: CLOSED FIXED QA Contact: Q.A. 4.0 <qa-4.0>
Severity: normal    
Priority: P2    
Version: 4.0   
Hardware: all   
OS: Linux   
Bug Depends on:    
Bug Blocks: 17310    

Description Ivan Zakharyaschev 2008-09-24 00:58:32 MSD
gqview-2.1.5-alt1 from Lite 4.0.3

I assume the conventional policy towards history files is not to make them world-readable. (Example: ~/.bash_history is not
world-readable.)

But the file ~/.gqview/history is made world-readable:

$ l .gqview/history 
-rw-r--r-- 1 imz imz 852 Сен 20 03:46 .gqview/history
$ 

Expected: it isn't world-readable. Good example: ~/.mc/history is not world-readable:

$ l .mc
итого 28
drwx------ 28 imz imz 4096 Сен 23 23:15 ../
drwxr-xr-x  3 imz imz 4096 Сен 23 22:56 ./
-rw-r--r--  1 imz imz  353 Сен 23 22:56 filepos
-rw-------  1 imz imz  521 Сен 23 22:56 history
-rw-r--r--  1 imz imz 3433 Сен 23 22:56 ini
-rw-r--r--  1 imz imz   35 Сен 23 22:56 Tree
drwx------  2 imz imz 4096 Авг  1 19:24 cedit/
$
Comment 1 Ivan Zakharyaschev 2008-09-24 04:15:12 MSD
Workaround: chmod go-r .gqview/history ; after this, the changed permissions will be kept.
Comment 2 Repository Robot 2010-06-03 19:27:42 MSD
gqview-2.1.5-alt5 -> sisyphus:

* Thu Jun 03 2010 Sergey Kurakin <kurakin@altlinux> 2.1.5-alt5
- system pictogramms in the folders browsing area (closes #18172)
- default permissions for histfile are 0600 (closes #17307)