On Sat, 27 Jan 2007, Charles Kerr wrote:
Still, plain text storage of the password in anything but a user-only
readable file isn't good. Please file a bug on this, then post the
link or bug number here and I'll second it.
Yes of course it was servers.xml, here's a pointer to the filed bug
http://bugzilla.gnome.org/show_activity.cgi?id=401087
There's a patch available for this bug at that link.
I'd appreciate a second pair of eyes to read it and/or give it a spin.
I've rebuilt (went ok) and reinstalled and after moving ~/.pan2 out of the
way and starting pan and adding a server I get the following permissions
after pan exits
-rw-r--r-- 1 robert robert 7877 Jan 27 21:15 accels.txt
drwxr-xr-x 2 robert robert 4096 Jan 27 21:15 article-cache
-rw------- 1 robert robert 40 Jan 27 21:15 group-preferences.xml
drwxr-xr-x 2 robert robert 4096 Jan 27 21:15 groups
-rw-r--r-- 1 robert robert 2441655 Jan 27 21:14 newsgroups.dsc
-rw-r--r-- 1 robert robert 100 Jan 27 21:15 newsgroups.xov
-rw-r--r-- 1 robert robert 106059 Jan 27 21:14 newsgroups.ynm
-rw------- 1 robert robert 248 Jan 27 21:15 posting.xml
-rw-r--r-- 1 robert robert 3547 Jan 27 21:15 preferences.xml
-rw-r--r-- 1 robert robert 389 Jan 27 21:13 servers.xml
-rw-r--r-- 1 robert robert 194 Jan 27 21:15 tasks.nzb
So permissions on servers.xml aren't getting set correctly, though the
permissions have changed on some files