summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--NEWS2
-rw-r--r--urpm/media.pm4
2 files changed, 6 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index d9772de3..9081ccf0 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,5 @@
+- Make sure that urpmi.cfg is world-readable (mga#9386)
+
Version 8.106 - 6 December 2016
- skip kernel-firmware-nonfree too when considering real kernels
diff --git a/urpm/media.pm b/urpm/media.pm
index 453e7ed8..9dac029f 100644
--- a/urpm/media.pm
+++ b/urpm/media.pm
@@ -551,6 +551,10 @@ sub write_urpmi_cfg {
};
remove_passwords_and_write_private_netrc($urpm, $config);
+ # urpmi.cfg must be world-readable, else mgaapplet won't be able to read it
+ # as it is executed from the user session. We enforce umask here in the case
+ # where the msec security level is set to 'secure' (which means umask 077).
+ umask 0022;
urpm::cfg::dump_config($urpm->{config}, $config)
or $urpm->{fatal}(6, N("unable to write config file [%s]", $urpm->{config}));