#1007240 gnome-boxes: disk image is world-readable by default

Package:
gnome-boxes
Source:
gnome-boxes
Description:
Simple GNOME app to access virtual systems
Submitter:
Ansgar
Date:
2022-03-14 12:27:04 UTC
Severity:
important
Tags:
#1007240#5
Date:
2022-03-14 12:23:37 UTC
From:
To:
I created a VM using gnome-boxes. The disk image created seems to be
world-readable (and executable):

+---
+---

I'm not sure one can rely on the permissions of ~/.local.

As the disk image may contain private information, I believe the
permissions should be more restrictive, that is, only read/write
access for the user and none for group and others.

Ansgar