[fedora-ja-list] [Bug 125331] htt_server needs the privileges to support the multiple users

[bugzilla ＠ redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125331





------- Additional Comments From ynakai ＠ redhat.com  2004-06-10 01:53 -------
Hmm, ~/.canna is readable for anyone.

$ LANG=C ls -lga ~/.canna*
-rw-r--r--  1 nakai 5542 May 25 16:16 /home/nakai/.canna

And users dictionaries too.

$ LANG=C ls -lga /var/lib/canna/dic/user/nakai/
total 16
-rw-rw-r--  1 bin   54 Jun  1 18:28 #dics.dir
drwxrwxr-x  2 bin 4096 Jun  1 18:28 .
drwxr-xr-x  3 bin 4096 Jun  1 18:28 ..
-rw-rw-r--  1 bin   79 Jun  1 18:28 dics.dir
-rw-rw-r--  1 bin    0 Jun  1 18:28 usr1.ctd

So htt can read them. But Canna was developped when there is no
networks, then no security holes, or users' privacies. But users'
dictionaries are somewhat privates of users. Red Hat might need to
decide the policy which categorize them to. And this issue is not
Canna- or Japanese-specific, as you know.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.