[Live-demo] [OSGeo] #628: files overly writable

OSGeo trac_osgeo at osgeo.org
Wed Aug 18 08:52:26 EDT 2010


#628: files overly writable
---------------------+------------------------------------------------------
 Reporter:  hamish   |       Owner:  live-demo@…              
     Type:  defect   |      Status:  new                      
 Priority:  minor    |   Milestone:                           
Component:  LiveDVD  |    Keywords:  777, perms               
---------------------+------------------------------------------------------
 Hi,

 in the ~user/data/ menu, these dirs are set a+w, which is to be avoided:
  * kml/
  * raster/
  * spatialite/
  * udig-data/

 besides being a security risk, it also means that the files will be held
 in RAM(?), which is bad.

 if you need to keep a file writable, add it to the "users" group.

 e.g.:
 {{{
 chown -R root.users pathname/
 chmod -R g+w pathname/
 adduser user users
 }}}

 as GID survives the ISO building process while UID does not.


 Hamish

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/628>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Live-demo mailing list