Bug#337830: Security problem in kphone

Hi Ludovic, Ludovic Drolez schrieb: > I cannot reproduce your bug. With my settings kphonerc is created with 664 > rights, since my umask is set to 002. > > I think that you have your umask set to 000. Which value returns 'umask ?' [EMAIL PROTECTED]:~$ umask 0022 [EMAIL PROTECTED]:~$ ls -l .qt/k

Bug#337830: Security problem in kphone

Package: kphone Version: 4.2-3 Severity: serious I think I have found a security flaw in kphone: it creates ~/.qt/kphonerc world-readable! This file contains the user's SIP-password and so on, so I guess this is a bad thing, because the ~/.qt dir itself is by default also readable by everybody. I