From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from localhost (localhost [127.0.0.1]) by arlo.cworth.org (Postfix) with ESMTP id AF4026DE0259 for ; Thu, 8 Feb 2018 18:33:10 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at cworth.org X-Spam-Flag: NO X-Spam-Score: -0.021 X-Spam-Level: X-Spam-Status: No, score=-0.021 tagged_above=-999 required=5 tests=[AWL=-0.021] autolearn=disabled Received: from arlo.cworth.org ([127.0.0.1]) by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KUs3hUciBzMP for ; Thu, 8 Feb 2018 18:33:10 -0800 (PST) Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118]) by arlo.cworth.org (Postfix) with ESMTPS id E05006DE0240 for ; Thu, 8 Feb 2018 18:33:09 -0800 (PST) Received: from fifthhorseman.net (unknown [38.109.115.130]) by che.mayfirst.org (Postfix) with ESMTPSA id E7826F99A; Thu, 8 Feb 2018 21:33:08 -0500 (EST) Received: by fifthhorseman.net (Postfix, from userid 1000) id 53A37201CD; Thu, 8 Feb 2018 21:33:06 -0500 (EST) From: Daniel Kahn Gillmor To: Brian Sniffen Cc: Notmuch Mail Subject: Re: [PATCH v2] cli/insert: new message file can be world-readable (rely on umask) In-Reply-To: References: <20180205225920.GL1824@hili.localdomain> <20180206194356.28438-1-dkg@fifthhorseman.net> <87k1vnuehz.fsf@fifthhorseman.net> Date: Thu, 08 Feb 2018 21:33:03 -0500 Message-ID: <87efluvqn4.fsf@fifthhorseman.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: notmuch@notmuchmail.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Feb 2018 02:33:10 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On Thu 2018-02-08 20:52:41 -0500, Brian Sniffen wrote: > If there=E2=80=99s a hidden danger in these modes, better to leave the sw= itch > requiring octal tunes! eh? i'm not sure i understand the argument. if there's a hidden danger, we want them to really clearly say on the tin what the hidden danger is. i think --world-readable=3Dtrue is a much clearer warning than =2D-mode=3DMYSTERYMEAT. right? what am i missing? --dkg --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzicvlOwymaWlnoHjyu+ogyFnUzMFAlp9CF8ACgkQyu+ogyFn UzMDcBAAjlJ6KKYKlbFPjKrEPyF5/w1UemQq+ml6yhYdX9ss6OijcRzDpBInLb+M CDVajDwfAU2ND5fWi7754cxW6w4g4l6U3yLgSbLPtiBZ5lSdEjlCcl8m1a2E5uK+ Ud4Dkj7tPEMCIYxy7gLWotu1RwPvnSJftLV90IaabxzzcIL0yXPWg3u0XFP9/6Mu mDF+T6YjoTdwlr4a4g3O7NNvCT16+dWPzIfuBl5C76FCVG5oMTnjFjsNgV8yosF+ qptXwYQR2DXXzSt7p9U+1+JIXnj2rF3kUFoV9mACI1AoGXYO8V2xhv6PRY7v4PgD koEGSOzmolcRDMypLm++wJBGt7UL5Pvk38nfkVs6gYD/zIzj6YuoZ+DsD6nNT/He 2HTUBx1HMpY3vLSeLaaK8EEld1LISv7Mu0qdHhk9RLGe5pF2eg9+Svk18XBgzjJS hTbT6ofRIBuV4TST6iI9zMK0S2SWSNzhGmbNSc8SGgIiZTZJmln29GVT7G4P7QvI Usyds4v9icZ7vSoQjThCBUmjQLHuAzuCvFbTIPVBWk0jqm1RMBLNjjeNn6n2ZuSi 5HNW+nRrIwvlpkP0hr8NPnhdFC8qgHL9A1R7wnC15SILowK4zi0SKasXDDkLAa6R gneRl1LGRSjZgDA1wn4+pdIuiyMNzRJtYGcGuKSji9FA+CRbehw= =Jnph -----END PGP SIGNATURE----- --=-=-=--