Bug 12827

Summary: fix port editors/joe
Product: Ports & Packages Reporter: Will Andrews <andrews>
Component: Individual Port(s)Assignee: Kris Kennaway <kris>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Will Andrews 1999-07-27 02:00:01 UTC 
This report was sent in by Trevor Johnson <trevor@jpj.net>, along with a
nice fix which I have tested on FreeBSD to make sure it works.

When joe is abnormally aborted, its DEADJOE file is world readable. This
can be a substantial security problem for editing files that are usually
only supposed to be readable by root - such as /etc/master.passwd.

How-To-Repeat: 
Start up joe like usual. Then kill -HUP it. It will create a DEADJOE file
that is world readable.. regardless of umask settings.
Comment 1 Kris Kennaway freebsd_committer freebsd_triage 1999-07-27 13:50:05 UTC 
Responsible Changed
From-To: freebsd-ports->kris

I'll take this one.
Comment 2 Kris Kennaway freebsd_committer freebsd_triage 1999-08-30 01:18:49 UTC 
State Changed
From-To: open->closed

Patch committed. Sorry about the delay - thanks for reminding me.