oss-sec mailing list archives

Re: Fw: Security risk of vim swap files


From: Christian Brabandt <cb () 256bit org>
Date: Mon, 6 Nov 2017 08:11:58 +0100


On So, 05 Nov 2017, Solar Designer wrote:

Yes, let's also force 0600 for "undo and backup files", please.

Backup files and undo files are not created by default, only when Vim is 
configured to do so. Also the undofile does not leak any information, 
because as soon as the original file has been slightly altered, the undo 
information is discarded.

Christian
-- 
Den ungerechtesten Frieden finde ich immer noch besser als den
gerechtesten Krieg.
                -- Marcus Tullius Cicero (106-43 v.Chr.)


Current thread: