aims team mailing list archive

[Jean-Marie PIVETEAU <1000543@xxxxxxxxxxxxxxxxxx>]

Hello,

I discover I have the same problem.

OS: Ubuntu 18.04.4

ls -ld .config/nautilus-actions/:
d-wxr-xr-T 2 jmp jmp 4096 déc.  10  2018 .config/nautilus-actions/

sudo ls -al .config/nautilus-actions/:
d-wxr-xr-T  2 jmp jmp 4096 déc.  10  2018 .
drwxr-xr-x 62 jmp jmp 4096 juin   7 16:37 ..
-rw-rw-r--  1 jmp jmp   35 déc.  10  2018 nautilus-actions.conf

-- 
You received this bug notification because you are a member of AIMS,
which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1000543

Title:
  Odd permissions on $HOME/.config/nautilus-actions make the directory
  unreadable by the owner

Status in nautilus-actions package in Ubuntu:
  Confirmed

Bug description:
  The directory $HOME/.config/nautilus-actions has odd permissions. The
  owner of the directory cannot read the contents of this directory.

  $ ls -ld ~/.config/nautilus-actions/
  d-wxr-xr-T 2 stefanl stefanl 4096 May 10 08:55 /home/stefanl/.config/nautilus-actions/
  $ ls -l ~/.config/nautilus-actions/
  ls: cannot open directory /home/stefanl/.config/nautilus-actions/: Permission denied

  $ cd $HOME/.config/nautilus-actions/
  $ ls -la
  ls: cannot open directory .: Permission denied

  
  As a result, backup programs such as 'deja-dup' and 'backintime' will fail. Any command which scans the users home directory will complain. 

  Here is a simple example using the 'find' command:

  stefanl@gondor:~ $ find $HOME >/dev/null
  find: `/home/stefanl/.config/nautilus-actions': Permission denied

  This is a subdirectory within a users home directory which cannot be
  read by the user. That seems wrong, and makes me uncomfortable from a
  security standpoint. Malware could install itself to this directory
  since the user has write permissions. However, the user would have
  trouble detecting this malware within the directory since they do not
  have read permissions.

  This looks like a bug to me. If it is not a bug, then can someone
  please justify this behavior?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nautilus-actions/+bug/1000543/+subscriptions