Binary package hint: nautilus
I am using Nautilus in connection with Eiciel for ACL support (what is the status of Nautilus' native ACL support anyways? I heard it should be there from GNOME 2.16 on...). When I copy a directory with files from a partition that was not mounted with acl support, file permissions differ depending on whether I do this copy operation from a shell (cp -r) or via Drag&Drop in Nautilus. In my oppinion, the file permissions via the shell command are more sensible.
----------------------------------
Permissions of the source directory (not mounted with ACL support)
hb@wodan:~$ getfacl .
# file: .
# owner: hb
# group: hb
user::rwx
group::r-x
other::r-x
----------------------------------
Permissions of the target directory (mounted with ACL support)
hb@wodan:~$ cd /var/pictures/
hb@wodan:/var/pictures$ getfacl .
# file: .
# owner: root
# group: pictures
user::rwx
group::rwx
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---
----------------------------------
Permissions of a subdirectory and a file in the subdirectory of the target directory (mounted with ACL support) that has been copied via the shell
hb@wodan:/var/pictures$ getfacl copy_s #this is a directory
# file: copy_s
# owner: hb
# group: pictures
user::rwx
group::rwx #effective:r-x
mask::r-x
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---
hb@wodan:/var/pictures$ getfacl copy_s/copy_s # this is a file
# file: copy_s/copy_s
# owner: hb
# group: pictures
user::rw-
group::rwx #effective:r--
mask::r--
other::---
----------------------------------
Permissions of a subdirectory and a file in the subdirectory of the target directory (mounted with ACL support) that has been copied via Nautilus Drag&Drop
hb@wodan:/var/pictures$ getfacl copy_n
# file: copy_n
# owner: hb
# group: pictures
user::rwx
group::rwx #effective:r-x
mask::r-x
other::r-x
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---
hb@wodan:/var/pictures$ getfacl copy_n/copy_n
# file: copy_n/copy_n
# owner: hb
# group: pictures
user::rw-
group::rwx #effective:r--
mask::r--
other::r--
----------------------------------------------------------------------------------------------------
Note how the permissions of "other" differ. I very much prefer them the way the shell does it. Since Nautilus is granting unwanted read access for world, I am marking this bug as a security vulnerability.
Thanks for your report, feel free to forward it upstream to bugzilla.gnome.org since you're facing the issue and known Eiciel better to response to the question upstream will do it. thanks.