Re: Curious permission problem

[Ole Laursen]

On Wed, Feb 17, 2010 at 3:32 PM, Michael Albinus <address@hidden> wrote:
> Ole Laursen <address@hidden> writes:
>
>> (defun tramp-default-file-modes (filename)
>>   (tramp-octal-to-decimal "0666"))
>
> That's a security threat. You might open root owned files from a remote
> server. Everybody can read those file on your local server, from the
> tmp directory.

Yeah. "0600" works too, it seems.

> Maybe we shall add an option to Tramp, that all group and world
> permissions are nuked when copying. So you can decide how to do it.

I personally think it would be good idea to use 600 by default for
security reasons. Can't you keep track of the permissions manually if
you want to be able to deliver them on the remote end with the same
permissions as before? Or am I missing something?

> --8<---------------cut here---------------start------------->8---
> (defun tramp-handle-insert-file-contents
>  (filename &optional visit beg end replace)
>  "Like `insert-file-contents' for Tramp files."
[...]

Just tested that, didn't work for me. I get an empty buffer. But I
might need a newer version of Tramp too, I guess.


Ole