[8967] in athena10
[Debathena] #1132: system:anyuser probably shouldn't have list
daemon@ATHENA.MIT.EDU (Debathena Trac)
Thu May 3 00:13:35 2012
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
From: "Debathena Trac" <debathena@MIT.EDU>
Cc: debathena@MIT.EDU
To: dlaw@MIT.EDU
Date: Thu, 03 May 2012 04:13:30 -0000
Reply-To:
Message-ID: <040.cf78605d2da785a643cb085cf06a3306@mit.edu>
Content-Transfer-Encoding: 8bit
#1132: system:anyuser probably shouldn't have list permissions on ~/.gnupg
-----------------------+--------------------------------
Reporter: dlaw | Owner:
Type: defect | Status: new
Priority: low | Milestone: The Distant Future
Component: -- | Keywords:
Upstream bug: |
-----------------------+--------------------------------
GPG creates files inside ~/.gnupg that contain semi-private information in
their names. I can go to another user's home directory and see a list of
all the machines from which they've run gpg simply by running "ls .gnupg".
I'm not sure how worrisome this is, since zlocate already provides
information about what machines people are using.
--
Ticket URL: <https://athena10.mit.edu/trac/ticket/1132>
Debathena <http://debathena.mit.edu>
MIT Debathena Project
