All true, for that reason alone it is even better to move the temp, even if only for backups.
That isnāt quite accurate. /tmpās permissions are usually 1777 (drwxrwxrwt) with the sticky bit only stopping users from deleting and renaming files they donāt own. But whether another user can read a file in /tmp depends only on the fileās permissions.
Do Webmin or Virtualmin write backups with world-readable permissions?
Do Webmin or Virtualmin write backups with world-readable permissions?
I donāt know, but I thought I would raise the issue just incase.
Just checked: started a backup and watched the files created, there is a mix of 0644 for those owned by root, and 0700 for the ones owned by other users, the files being named something like 939976_129637_29_backup.cgi.
Also in the folder where the tar.gz actually goes (the one with the name of the backup ie 129687-zz-12-12-2025-14-25), I saw the folder with 0700 and the tar.gz file inside it with 0600, both owned by root.
So it looks OKish. One thing though: I tried changing /var/tmp/.webmin to 0700 (the folder set by me in the configuration). When the backup started it was back to 0755ā¦
This is expected:
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.