Re: world-writable full-image

Gary Byers <[email protected]> Tue, 31 Jul 2007 06:50:13 -0600 (MDT)
Newsgroups gmane.lisp.openmcl.bugs
Message-ID <[email protected]>
Well, SAVE-APPLICATION had a :MODE argument, but:

a) it was defaulting to #o666
b) it wasn't having any effect unless :prepend-kernel was specified and
    non-nil

It now defaults to #o644 and is used in all cases when the image is
created.

The change should show up in CVS about 15 minutes past the hour.

On Mon, 30 Jul 2007, Marijn Schouten (hkBst) wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi list,
>
> after I do: echo "(ccl:rebuild-ccl :full t)" | ./lx86cl64 -b -Q
>
> the newly built full-image is world-writable, permissions -rw-rw-rw-. This
> poses a security risk. The packaged full-image has permissions -rw-r--r--,
> which should probably also be the default for any newly built full-images.
>
> Marijn
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.5 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFGrd62p/VmCx0OL2wRAkZ5AJ4tdnMxuIes9XRC2d13Vbcq9ABc9ACgtN56
> 7ykO2ZCnxWykTFA/5eHE0eo=
> =oEOu
> -----END PGP SIGNATURE-----
> _______________________________________________
> Bug-openmcl mailing list
> [email protected]
> http://clozure.com/mailman/listinfo/bug-openmcl
>
>