Il giorno gio, 23/03/2006 alle 10.18 +1100, Drew Parsons ha scritto: > Package: evolution > Version: 2.4.2.1-1 > Severity: critical > > evolution offers you the option of saving passwords to mail servers so you > don't have to type them in each time. They get saved to > ~/.gnome2_private/Evolution. > > The permissions of this file are -rw-r--r--. This means anyone on the same > machine can read your passwords, correct? > > Marking as "critical" since this is surely a security hole.
In a directory not accessible by any other user? drwx------ 2 christian christian 4096 2006-02-16 01:27 .gnome2_private bye Christian -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
