authentication.conf should not be created "chmod go+r"

[Joke de Buhr]

lauchpad-login and other plugins may use set_credential() to create the authentication.conf file. Since it's very likely someone might at passwords later on the file should never be created world readable initially.
It's safer to create the file with a umask(0177) rather the default umask. This way it's impossible to gain access to user-stored password if the user forget to run "chmod u=rw,go= ~/.bazaar/authenfication.conf" after adding ftp passwords or whatever.
Even set_credential() has the ability to store passwords so umasking the file would be safer if plugins start to set passwords with set_credential().

[Vincent Ladeuil (vila)]

Thanks for working on this !

Would you mind doing a merge proposal so we can better track your patch ?
A couple of comments in the mean time:

The _save() docstring is out of date: obviously this is used outside of tests now,

Can you add tests to:
- check that the file is created with the right umask,
- check that we issue the warning if not (and mention the mode bits in the warning)

I'm not sure about how to address that concern on windows, but at least to start we may not want to
do a check there if there is no way to make it succeeds...

Don't hesitate to bring the topic on the mailing list where we'll get more feedback.

[Joke de Buhr (joke)]

No problem. I'm going to propose a merge after adding some checks.

I've got no experience in python windows programming but as far as I know functions like os.umask() should work in a compatible workaround way or be ignored on windows.

so far the patch has this functions:
 - bzr's ~/.bazaar/authentication.conf is initially created with permissions 600
 - bzr emits a warning upon accessing the file if it's permissions are insecure (g!=0, o!= 0)
 - warning can be disabled in ~/.bazaar/bazaar.conf

[John A Meinel (jameinel)]

Joke did do some work on this, but never proposed it for merging. Presumably because he wanted to add some test cases. For now, I'm just going to propose the branch to get this unstuck a bit.