wv stores world writable files in /tmp

Thomas Gebhardt gebhardt@HRZ.Uni-Marburg.DE
Thu, 26 Oct 2000 17:54:00 +0200


Hi,

we are using imp 2.2.3 (Debian package) together with wvware 0.60.

The latter seems to store temporary files with odd permissions
in /tmp, e.g.:

 -rw-rw--w-    1 www-data www-data   236106 Oct 24 12:05 
imp.word.2000-Oct-Tue_12:05:10__a78839fa06fd8e140d6df5957dfbf6511.png

Any idea how we can fix the permission to something like 600 ?

Some details:

In file /usr/share/horde/imp/lib/mimetypes.lib are defined the different 
operations for working with mime-encoded mail-parts. The files
that are generated by these operations in /tmp are generated with 
these strange permissions (and mostly removed after operating).
It seems as if the umask-setting as defined in defaults.php3 as:
$default->umask                     = '077';
is ignored by these operations.

Thanks, Thomas