password visible

Please post the output of:

ls -al ~/.notifier.conf

-rw-r--r-- 1 sergio sergio 186 2006-02-28
14:49 /home/sergio/.notifier.conf

El sáb, 08-04-2006 a las 00:08 +0000, Dennis Kaarsemaker escribió:
> Please post the output of:
>
> ls -al ~/.notifier.conf
>

Setting to major since this is a security issue

 severity Major

Fairy trivial patch:

--- gmail-notify-1.6.1/GmailConfig.py 2005-09-25 19:12:11.000000000 +0200
+++ gmail-notify-1.6.1.new/GmailConfig.py 2006-04-08 23:36:53.000000000 +0200
@@ -237,7 +237,10 @@
                                self.config.remove_option( "options", "gmailusername" )
                                self.config.remove_option( "options", "gmailpassword" )

- self.config.write( open( self.loadedConfig, 'w' ) )
+ fd = open( self.loadedConfig, 'w' )
+ os.chmod( self.loadedConfig, 0600)
+ self.config.write( fd )
+ fd.close()
                        gtk.main_quit()
                        self.hide()
                else:

(ok, malone still sucks ;))

This patch is better - but people who use tabs in python should be larted...

Added patch and uploaded. Thanks.