After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 724436 - "View Source" creates world-readable temporary files
"View Source" creates world-readable temporary files
Status: RESOLVED FIXED
Product: geary
Classification: Other
Component: client
0.4.2
Other Linux
: Normal normal
: 0.8.2
Assigned To: Geary Maintainers
Geary Maintainers
Depends on:
Blocks:
 
 
Reported: 2014-02-15 20:42 UTC by andreasfleig
Modified: 2014-11-01 00:16 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description andreasfleig 2014-02-15 20:42:15 UTC
When the "View Source" command is used on a mail, Geary copies the message into a world-readable file in /tmp, exposing it to all users on the system. 

Expected behaviour:

Temporary files stored in /tmp should only be readable by their owner.
Comment 1 Charles Lindsay 2014-02-17 19:10:52 UTC
See also bug #714782.
Comment 2 Jim Nelson 2014-10-09 20:55:59 UTC
Pushed to master, commit 4f8cad