Ubuntu
ntfs-3g package

Gedit violates security of backup file on NTFS

Bug #1303757 reported by UlfZibis on 2014-04-07

260

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	ntfs-3g (Ubuntu)	Confirmed	Undecided	Unassigned

Bug Description

Using NTFS-3G 2014.2.15
- Create new empty text file with Windows 7.
- Reboot PC with Ubuntu, fstab mounts NTFS partition with UserMapping and inherit option.
- With Gedit enter some text in text file and save.
- Reboot PC with Windows 7
--> Resulting backup file has changed permissions with full access to anybody.
--> See screen shot.

See original description

Revision history for this message

UlfZibis (ulf-zibis) wrote on 2014-04-07:

screen shot of permissions of original and backup file Edit (84.4 KiB, image/png)

description:

updated

Revision history for this message

Seth Arnold (seth-arnold) wrote on 2014-04-07:

Is there anything special about 'gedit' or is it just the act of editing?

Thanks

information type:

Private Security → Public Security

Revision history for this message

UlfZibis (ulf-zibis) wrote on 2014-04-07:

The only thing special is that gedit provides a backup of the original file.
I came to the issue when trying a patch to ntfs-3g were the behaviour to the permissions was contrary, see: http://tuxera.com/forum/viewtopic.php?p=38209&sid=a9914342b2b56a46a33fa94b68d72d15#p38209
In that case the permissions of the backup file remained in correct inherited state, but the regular file got changed permissions, not inherited from the parent folder. So it's unclear, if gedit renames the old file and writes the changes in a new file with original name or if it copies the original to the backup file and changes the content of the original file.
This triggered me to check the behaviour without the patch with an empty file, created from Windows.