Ubuntu
thunderbird package

Thunderbird saves mail as 600 instead of 660 permissions

Bug #810939 reported by Maroquesne on 2011-07-15

This bug affects 3 people

Affects		Status	Importance	Assigned to	Milestone
	Mozilla Thunderbird	Invalid	Medium	mozilla-bugs #676339
	thunderbird (Ubuntu)	Triaged	Medium	Unassigned

Bug Description

Thunderbird saves mail as 600 instead of 660 permissions
-----
Steps to reproduce:
Open an email in Thunderbird
File > Save
"ls -l" the directory where the email was saved

Result:
Email .eml file is saved with 600 (-rw -------)

Expecting:
Email .eml file should be saved with 660 (-rw-rw----) as the umask value is 007
==

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: thunderbird 3.1.6+build1+nobinonly-0ubuntu0.10.10.1
ProcVersionSignature: Ubuntu 2.6.35-23.41-generic-pae 2.6.35.7
Uname: Linux 2.6.35-23-generic-pae i686
Architecture: i386
Date: Fri Jul 15 10:48:39 2011
InstallationMedia: Ubuntu-Server 10.10 "Maverick Meerkat" - Release i386 (20101007)
ProcEnviron:
LANG=fr_FR.utf8
SHELL=/bin/bash
SourcePackage: thunderbird

Tags:

Revision history for this message

Maroquesne (service-informatique-i) wrote on 2011-07-15:

Dependencies.txt Edit (3.1 KiB, text/plain; charset="utf-8")

Revision history for this message

In Mozilla Bugzilla #676339, komputes (komputes) wrote on 2011-08-03:

User Agent: Mozilla/5.0 (X11; Linux i686; rv:5.0) Gecko/20100101 Firefox/5.0
Build ID: 20110622232052

Steps to reproduce:

Steps to reproduce:
Open an email in Thunderbird
File > Save
"ls -l" the directory where the email was saved

Actual results:

Result:
Email .eml file is saved with 600 (-rw -------)

Expected results:

Expecting:
Email .eml file should be saved with 660 (-rw-rw----) as the umask value is 007

Revision history for this message

In Mozilla Bugzilla #676339, komputes (komputes) wrote on 2011-08-03:

Changed in thunderbird (Ubuntu):
importance:	Undecided → Medium
status:	New → Confirmed

Revision history for this message

komputes (komputes) wrote on 2011-08-03:

@ChrisCoulson - might you be able to write a patch for this?

Doing some research I have found similar issues reported:
Issue dealing with attachments is fixed in TB 3.3
https://bugzilla.mozilla.org/show_bug.cgi?id=533976

Issue Dealing with saving email (644 on MacOS X - same concept)
https://bugzilla.mozilla.org/show_bug.cgi?id=472865

Older similar bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=124307

Micah Gersten (micahg) on 2011-08-03

Changed in thunderbird (Ubuntu):
status:	Confirmed → Triaged

Bug Watch Updater (bug-watch-updater) on 2011-08-03

Changed in thunderbird:
importance:	Unknown → Medium
status:	Unknown → New

Revision history for this message

komputes (komputes) wrote on 2011-08-03:

This also affects thunderbird-trunk 8.0~a1~hg20110731r8217 from ppa:ubuntu-mozilla-daily .

Revision history for this message

In Mozilla Bugzilla #676339, Ludovic-mozilla (ludovic-mozilla) wrote on 2011-08-04:

*** This bug has been marked as a duplicate of bug 472865 ***

Bug Watch Updater (bug-watch-updater) on 2011-08-04

Changed in thunderbird:
status:	New → Invalid

Revision history for this message

Chelmite (steve-kelem) wrote on 2013-01-18:

This bug, one of file permissions is NOT a duplicate of 472865, "WARNING: at /build/buildd/linux-2.6.31/kernel/power/suspend_test.c:52 suspend_test_finish+0x80/0x90()" .

In Thunderbird 17.0.2, even with a umask of 022, TB creates directories with permissions 0775 instead of 0755 and files with 0664 instead of 0644. This leaves directories and files open to tampering by anyone in the same group, and so is a security vulnerability!