Skip to content

CVE-2019-12450: gfile: Limit access to files when copying

Ondrej Holy requested to merge wip/oholy/copy-permissions into master

file_copy_fallback creates new files with default permissions and set the correct permissions after the operation is finished. This might cause that the files can be accessible by more users during the operation than expected. Use G_FILE_CREATE_PRIVATE for the new files to limit access to those files.

Merge request reports