hep-gc/grid-cert-export — Issue #6: Bug - Possible Security Issue
Author: andpol
Created: 2011-10-12 23:09:06+00:00
State: open
Labels: Bug

When cgi-script is running, temporary files are created for the actual openssl execution.
For security, these files have filenames that are 20 random characters long and are created with 600 permissions.

The issue is that 600 permissions are for the user "apache" and might be able to be read if not deleted for some reason (cgi-script crashes for example).

Look into this.