Bugtraq mailing list archives

Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files


From: Scott Howard <scott () doc net au>
Date: Thu, 23 Aug 2001 08:34:36 +1000

Adobe Acrobat creates world writable ~/AdobeFnt.lst files
Another possible workaround would be to create a shared object that
replaced the open/chmod calls that change the permissions on the file,
this could then be LD_PRELOAD'd so that acroread doesn't do the wrong thing.

How about :

mkdir ~/.adobe
chmod 600 ~/.adobe
mv ~AdobeFnt.lst ~/.adobe/
ln -s ~/.adobe/AdobeFnt.lst ~

As the chmod will follow the symlink, it will change the permissions of the
file, not the link. This means that the file itself still ends up as mode
0666, but as the directory it's in is mode 0600, then nobody will be able
to access it other than the owner.

Adding the above (with some checking that it hasn't already been done, etc)
to a script which start Acrobat would handle the problem for all users.

  Scott.


Current thread: