Gedit violates security of backup file on NTFS

Bug #1303757 reported by UlfZibis
260
This bug affects 2 people
Affects Status Importance Assigned to Milestone
ntfs-3g (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Using NTFS-3G 2014.2.15
- Create new empty text file with Windows 7.
- Reboot PC with Ubuntu, fstab mounts NTFS partition with UserMapping and inherit option.
- With Gedit enter some text in text file and save.
- Reboot PC with Windows 7
--> Resulting backup file has changed permissions with full access to anybody.
--> See screen shot.

Revision history for this message
UlfZibis (ulf-zibis) wrote :
description: updated
Revision history for this message
Seth Arnold (seth-arnold) wrote :

Is there anything special about 'gedit' or is it just the act of editing?

Thanks

information type: Private Security → Public Security
Revision history for this message
UlfZibis (ulf-zibis) wrote :

The only thing special is that gedit provides a backup of the original file.
I came to the issue when trying a patch to ntfs-3g were the behaviour to the permissions was contrary, see: http://tuxera.com/forum/viewtopic.php?p=38209&sid=a9914342b2b56a46a33fa94b68d72d15#p38209
In that case the permissions of the backup file remained in correct inherited state, but the regular file got changed permissions, not inherited from the parent folder. So it's unclear, if gedit renames the old file and writes the changes in a new file with original name or if it copies the original to the backup file and changes the content of the original file.
This triggered me to check the behaviour without the patch with an empty file, created from Windows.

Revision history for this message
UlfZibis (ulf-zibis) wrote :
Changed in ntfs-3g (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.