Secure testing team - Dec 2009 - Bug#560087: Saved files have group 'games'

Package: xpat2
Version: 1.07-16
Severity: normal
Tags: security

Hello Arne,

If you save a game (by clicking on ''save'') it get the games
unix group
instead of the user group:

LANG=C ls -l Spider.260301049
-rw-r--r-- 1 bill games 160 Dec  8 20:37 Spider.260301049

This is a mild security issue if your umask is 002, since this allow
someone subverting the games group to change this file.

This bug seems to be very old since I have old saved games from 2003
in the ''games'' group.

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.