diff options
author | David Kalnischkies <david@kalnischkies.de> | 2017-07-07 22:21:44 +0200 |
---|---|---|
committer | David Kalnischkies <david@kalnischkies.de> | 2017-07-26 19:09:04 +0200 |
commit | 881ec045b6660e2fe0c6953720260e380ceeeb99 (patch) | |
tree | 231454f60c5d3bd20396444316bf15671a7a5ee7 /apt-pkg/acquire-item.cc | |
parent | 6291fa81da6ed4c32d0dde33fa559cd155faff11 (diff) |
allow the auth.conf to be root:root owned
Opening the file before we drop privileges in the methods allows us to
avoid chowning in the acquire main process which can apply to the wrong
file (imagine Binary scoped settings) and surprises users as their
permission setup is overridden.
There are no security benefits as the file is open, so an evil method
could as before read the contents of the file, but it isn't worse than
before and we avoid permission problems in this setup.
Diffstat (limited to 'apt-pkg/acquire-item.cc')
0 files changed, 0 insertions, 0 deletions