summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@netscape.net>2017-03-24 20:06:01 +0100
committerRémi Verschelde <rverschelde@gmail.com>2017-04-03 19:12:51 +0200
commitf27b8d7a11f261d0b15ca1a7871a497936bd1ee9 (patch)
treefa3365cb333b70e77f60a82f548c524aa0c0ded4
parent8f1579501439917de64f3427cf44e69ebdf3623f (diff)
downloadurpmi-f27b8d7a11f261d0b15ca1a7871a497936bd1ee9.tar
urpmi-f27b8d7a11f261d0b15ca1a7871a497936bd1ee9.tar.gz
urpmi-f27b8d7a11f261d0b15ca1a7871a497936bd1ee9.tar.bz2
urpmi-f27b8d7a11f261d0b15ca1a7871a497936bd1ee9.tar.xz
urpmi-f27b8d7a11f261d0b15ca1a7871a497936bd1ee9.zip
Make sure that urpmi.cfg is world-readable so that mgaapplet can read it (mga#9386)
-rw-r--r--NEWS2
-rw-r--r--urpm/media.pm4
2 files changed, 6 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index d9772de3..9081ccf0 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,5 @@
+- Make sure that urpmi.cfg is world-readable (mga#9386)
+
Version 8.106 - 6 December 2016
- skip kernel-firmware-nonfree too when considering real kernels
diff --git a/urpm/media.pm b/urpm/media.pm
index 453e7ed8..9dac029f 100644
--- a/urpm/media.pm
+++ b/urpm/media.pm
@@ -551,6 +551,10 @@ sub write_urpmi_cfg {
};
remove_passwords_and_write_private_netrc($urpm, $config);
+ # urpmi.cfg must be world-readable, else mgaapplet won't be able to read it
+ # as it is executed from the user session. We enforce umask here in the case
+ # where the msec security level is set to 'secure' (which means umask 077).
+ umask 0022;
urpm::cfg::dump_config($urpm->{config}, $config)
or $urpm->{fatal}(6, N("unable to write config file [%s]", $urpm->{config}));