ports/137131: genkdmconf leaves new kdmrc world readable

[Brad Huntting]

>Number:         137131
>Category:       ports
>Synopsis:       genkdmconf leaves new kdmrc world readable
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Jul 25 16:30:02 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Brad Huntting
>Release:        7.2-RELEASE
>Organization:
>Environment:
FreeBSD lugubrious.glarp.com 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Mon Jul  6 18:55:25 MDT 2009     root at lugubrious.glarp.com:/usr/src/sys/i386/compile/GENERIC  i386

>Description:
After doing a portupgrade, I discovered that /usr/local/share/config/kdm/kdmrc had been recreated (exactly as before), but was mode 0644.  Consequently the AutoLoginPass was ignored (as it should be).

After chmod'ing kdmrc and restarting kdm-bin, it promptly changed the modes back again.

The work around would appear to be to put a chmod 0600 ...kdmrc in the Xstartup file.


brad
>How-To-Repeat:
chmod 0600 /usr/local/share/config/kdm/kdmrc 
/usr/local/kdm/bin
..
ls -l /usr/local/share/config/kdm/kdmrc 
>Fix:
the bug is in genkdmconf.  The simple workaround of adding a chmod to .../bin/kdm doesnt work.

>Release-Note:
>Audit-Trail:
>Unformatted: