Bug 24284

Summary:	/etc/skel/.xinitrc and .xsessionrc permissions are 755
Product:	xorg	Reporter:	jugg <jugg>
Component:	Security	Assignee:	X.Org Security <xorg_security>
Status:	RESOLVED NOTOURBUG	QA Contact:	X.Org Security <xorg_security>
Severity:	normal
Priority:	medium	Keywords:	security
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:

Description jugg 2009-10-02 18:14:07 UTC

/etc/skel/.xinitrc
/etc/skel/.xsessionrc

Both files are 775 (-rwxr-xr-x)

It seems that they should be at most 644

I originally reported this against ArchLinux, and was told that:

"The same permissions are specified in xorg-xinit's PKGBUILD (the package that both files belong to)."

The relevant(???) versions in Arch:

xorg-server: 1.6.3.901-1
xorg-xinit: 1.1.1-1

Comment 1 Alan Coopersmith 2009-10-02 18:21:47 UTC

PKGBUILD sounds like an ArchLinux packaging file.   X.Org does not
distribute any files that install under /etc/skel, nor a "PKGBUILD".

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.