lualatex: files with permissions -rw-rw-rw-

Bug #1333016 reported by Martin Konôpka
This bug affects 1 person
Affects Status Importance Assigned to Milestone
texlive-base (Ubuntu)

Bug Description

(1) I have a sample file testfile.tex :

[konopka@notebook tmp] cat testfile.tex



(2) I run the command
lualatex testfile.tex

Lualatex produces .aux and .pdf files with permissions 666 , which is insecure:
-rw------- 1 konopka konopka 104 2014-06-22 22:26 testfile.tex
-rw-rw-rw- 1 konopka konopka 8 2014-06-22 22:27 testfile.aux
-rw-rw-rw- 1 konopka konopka 3383 2014-06-22 22:27 testfile.pdf
-rw------- 1 konopka konopka 32302 2014-06-22 22:27 testfile.log

If I use a sample file without the option \usepackage{polyglossia} then the permission are all right (600).
Note that I have my umask set to 0077.
It looks that lualatex (with \usepackage{polyglossia}) is ignorant of my umask.

I found a complaint about the files permissions also on page

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: texlive-luatex 2013.20140215-1
ProcVersionSignature: Ubuntu 3.13.0-29.53-generic
Uname: Linux 3.13.0-29-generic i686
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: i386
Date: Sun Jun 22 22:34:02 2014
InstallationDate: Installed on 2014-03-05 (108 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha i386 (20140304)
PackageArchitecture: all
SourcePackage: texlive-base
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Martin Konôpka (martin.konopka) wrote :
information type: Private Security → Public Security
Changed in texlive-base (Ubuntu):
status: New → Confirmed
Changed in texlive-base (Ubuntu):
importance: Undecided → High
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers