Permissions of files created by notmuch

Permissions of files created by notmuch

[Georg Faerber]

[-- Attachment #1: Type: text/plain, Size: 314 bytes --]

Hi all,

I'm using notmuch 0.26-1+b2 out of Debian unstable.
The files created inside .notmuch/xapian by notmuch are group and world
readable.  Is this on purpose? This seems quite suboptimal, especially
if one is using the recently introduced cleartext indexing feature..

Any feedback appreciated,
cheers,
Georg

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Permissions of files created by notmuch

[David Bremner]

Georg Faerber <georg@riseup.net> writes:

> Hi all,
>
> I'm using notmuch 0.26-1+b2 out of Debian unstable.
> The files created inside .notmuch/xapian by notmuch are group and world
> readable.  Is this on purpose? This seems quite suboptimal, especially
> if one is using the recently introduced cleartext indexing feature..
>

I would expect Xapian (and hence notmuch) to use the users umask when
creating those files. Are you saying that's not the case, or that you
expect Xapian/notmuch to override the user's umask?

d

Re: Permissions of files created by notmuch

[Daniel Kahn Gillmor]

[-- Attachment #1: Type: text/plain, Size: 773 bytes --]

On Sun 2018-03-18 04:30:06 +0100, Georg Faerber wrote:

> I'm using notmuch 0.26-1+b2 out of Debian unstable.
> The files created inside .notmuch/xapian by notmuch are group and world
> readable.  Is this on purpose? This seems quite suboptimal, especially
> if one is using the recently introduced cleartext indexing feature..

is your mailbox itself world-readable?  What is your umask?

in general, i'd expect notmuch to follow umask like any other unix
tool.  if we wanted it to be more restrictive, maybe that's a separate
use case.

See also discussion at id:20180209041058.4037-1-dkg@fifthhorseman.net
around whether "notmuch insert" and other tools should produce
world-readable files by default.

curious to hear what you think is the right choice here.

   --dkg

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 227 bytes --]