Date: Sun, 5 Nov 2017 18:17:04 +0100 From: Christian Brabandt <cb@...bit.org> To: oss-security@...ts.openwall.com Subject: Re: Fw: Security risk of vim swap files On Fr, 03 Nov 2017, Jakub Wilk wrote: > In general, what vim does (copying mode bits) in not enough to ensure that > the swapfile is readable only by the users who had access to the original > file. It would have to copy also group ownership and ACLs. I think patch https://github.com/vim/vim/releases/tag/v8.0.1263 fixes the group ownership problem. Christian -- Advokaten, die Bratenwender der Gesetze, die so lange die Gesetze wenden und anwenden, bis ein Braten für sie abfällt. -- Heinrich Heine
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.