From: Lars Nooden <lars.nooden@gm...> - 2013-04-05 19:46:19
I've got re-alpine 2.03(1266) on OpenBSD-current and notice that _TMPFILE_
used by the configuration option 'display-filters' appears to use the
umask which re-alpine was run with. With many systems and in many
situations, that defaults to world-readable tempfiles and can potentially
be a privacy problem. The same goes for _RESULTFILE_
/usr/loca/bin/gpg -d _TMPFILE_ > _RESULTFILE_
I would expect that the tempfiles would use the same settings as for the
local mail folders or else default to a stricter setting like 0027 or
0077. Maybe the tempfiles should even be hidden in their own temp
directory. One work around is like this:
/usr/loca/bin/gpg -d _TMPFILE_ | less
PS. Thanks for re-alpine, it's a great e-mail program.
Get latest updates about Open Source Projects, Conferences and News.