VULHUB ™

The Mandrake 8.2 version of the Mandrake-Security package (msec) installs home directories with world-readable permissions on the Standard security setting. This is misleading as the Standard security setting is intended to be ideal for systems which have multiple local users. This may expose contents of home directories to other local users. Additionally, msec will proactively reset the permissions of home directories if they are changed from the default world-readable permissions. msec is a mandatory component of Mandrake 8.2 and may not be deselected during an install of the operating system.

The Mandrake 8.2 version of the Mandrake-Security package (msec) installs home directories with world-readable permissions on the Standard security setting. This is misleading as the Standard security setting is intended to be ideal for systems which have multiple local users. This may expose contents of home directories to other local users. Additionally, msec will proactively reset the permissions of home directories if they are changed from the default world-readable permissions. msec is a mandatory component of Mandrake 8.2 and may not be deselected during an install of the operating system.