files are created with insecure umask before being protected
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
duplicity (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Using Déjà-Dup, I noticed the muliple backup volumes created on the destination (sftp in my case) are initially created with a permissive umask. Here is an example of a running backup:
root@xeon:
total 278756
-rw------- 1 simon simon 26251167 2013-01-01 12:50 duplicity-
-rw-r--r-- 1 simon simon 23134208 2013-01-01 12:50 duplicity-
-rw------- 1 simon simon 26242590 2013-01-01 12:47 duplicity-
-rw------- 1 simon simon 26200476 2013-01-01 12:47 duplicity-
-rw------- 1 simon simon 26253055 2013-01-01 12:48 duplicity-
-rw------- 1 simon simon 26200777 2013-01-01 12:48 duplicity-
-rw------- 1 simon simon 26226816 2013-01-01 12:48 duplicity-
-rw------- 1 simon simon 26219546 2013-01-01 12:49 duplicity-
-rw------- 1 simon simon 26230722 2013-01-01 12:49 duplicity-
-rw------- 1 simon simon 26217069 2013-01-01 12:49 duplicity-
-rw------- 1 simon simon 26237182 2013-01-01 12:50 duplicity-
drwx------ 2 root root 16384 2013-01-01 12:44 lost+found
Where the "vol11" file is only chmod'ed once fully uploaded.
$ apt-cache policy duplicity deja-dup
duplicity:
Installed: 0.6.18-0ubuntu3
Candidate: 0.6.18-0ubuntu3
Version table:
*** 0.6.18-0ubuntu3 0
500 http://
100 /var/lib/
deja-dup:
Installed: 22.0-0ubuntu3
Candidate: 22.0-0ubuntu3
Version table:
*** 22.0-0ubuntu3 0
500 http://
100 /var/lib/
22.0-0ubuntu2 0
500 http://
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: duplicity 0.6.18-0ubuntu3
ProcVersionSign
Uname: Linux 3.2.0-35-generic x86_64
ApportVersion: 2.0.1-0ubuntu17
Architecture: amd64
Date: Tue Jan 1 13:27:13 2013
MarkForUpload: True
ProcEnviron:
LANGUAGE=en_CA:en
TERM=xterm
PATH=(custom, no user)
LANG=en_CA.UTF-8
SHELL=/bin/bash
SourcePackage: duplicity
UpgradeStatus: No upgrade log present (probably fresh install)