Re: Fwd: [SCM] opendkim branch, develop, updated. 9c9f6aa9e5f6f39334f9e2a8126787c798504738

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Sat, 23 Feb 2013 04:33:20 -0800 (PST)

On Sat, 23 Feb 2013, Daniel Black wrote:
> This should have a umask set in the script to prevent a race condition
> from accessing the private key.

If this is typically run by the same user every time, then you must be
talking about a umask that turns off the write bit. Otherwise the same
user can always overwrite its own files. Correct?

If the concern is that some other user could write the file before root
gets there, then this is really a concern about the permissions on
/etc/mail/opendkim, and umask doesn't matter.

-MSK
Received on Sat Feb 23 2013 - 12:33:40 PST