boltgolt/howdy

Should snapshots be readable for everyone?

開放

#397 建立於 2020年7月16日

 (7 則留言) (1 個反應) (0 位負責人)Python (268 個分叉)batch import
bughelp wanted

倉庫指標

星標
 (4,836 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

I had a look around for the snapshot folder and discovered that the file in it was readable for everyone, I also tried opening it in an image viewing program and that worked. The permissions on it are: -rw-rw-r-- root <my user's group> /usr/lib/security/howdy/snapshots/20200716T180150.jpg

OS: Kubuntu 20.04 Howdy version: 2.6.0

貢獻者指南