#659722 /usr/bin/gpg-agent: permission

Package:
gnupg-agent
Source:
gnupg2
Submitter:
A Mennucc
Date:
2014-08-19 21:57:04 UTC
Severity:
minor
#659722#5
Date:
2012-02-13 13:07:05 UTC
From:
To:
hi,

the permissions in the socket of the agent are:

$ ls -al /tmp/gpg-BB7pPK
totale 0
drwx------  2 theuser theuser   60 feb 13 13:57 .
drwxrwxrwt 56 root    root   4700 feb 13 13:59 ..
srwxr-xr-x  1 theuser theuser    0 feb 13 13:57 S.gpg-agent

Just to be on the safe side, wouldn't it be better to change that to

srwx------  1 theuser theuser    0 feb 13 13:57 S.gpg-agent

?

a.
#659722#10
Date:
2014-08-19 21:55:25 UTC
From:
To:
The way unix sockets work in general is their permission are ignored
and you need to use a directory to enforce their permissions. This
isn't true on linux but there isn't really a point in making an
exception for it.

See http://man7.org/linux/man-pages/man7/unix.7.html#NOTES for more details.

* A Mennucc (mennucc1@debian.org) wrote: