Sets permission rights to 700 on /var/tmp user dirs

Forwarded: yes

Fixes CVE-2020-11867

Gbp-Pq: Name 0006-Fix_CVE-2020-11867.patch

diff --git a/src/AudacityApp.cpp b/src/AudacityApp.cpp
index 3c29ac70dfc6c5240c9a1079bc5fede180cbb972..338db3f3b8e5508afb3974b5d15b1ddae41fa922 100644 (file)
--- a/src/AudacityApp.cpp
+++ b/src/AudacityApp.cpp
@@ -1695,7 +1695,7 @@ bool AudacityApp::InitTempDir()
    // The permissions don't always seem to be set on
    // some platforms.  Hopefully this fixes it...
    #ifdef __UNIX__
-   chmod(OSFILENAME(temp), 0755);
+   chmod(OSFILENAME(temp), 0700);
    #endif
 
    bool bSuccess = gPrefs->Write(wxT("/Directories/TempDir"), temp) && gPrefs->Flush();