292069 - Mozilla / Firefox indiscreet temporary files on UNIX / missing privacy

Status: RESOLVED DUPLICATE of bug 251297

(Firefox :: File Handling, defect)

Description

[pr0nsurfer]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050421 Firefox/1.0.3 (Debian package 1.0.3-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050421 Firefox/1.0.3 (Debian package 1.0.3-2)

downloads show up as temporary files with permissions of 0700 in /tmp. It would
be better to have a directory (e.g. /tmp/.firefox-$USER) with permissions 0700
where they show up - this way neither the fact that something was download nor
the filenames are given away. 

Reproducible: Always

Steps to Reproduce:
1. click a file which uses a helper application
2. choose 'open with'
3. look in /tmp

Actual Results:  
file with clearly readable filename and permissions 0700 belonging to the user
in /tmp

Expected Results:  
the file should be in a directory inaccessible to other users on the system, so
neither the name nor the fact that something was downloaded can be seen (the
latter is next to impossible, the date of the directory will give it away anyway
- but that's not as important)

No workaround, and should be easy to fix.

Comment 1

[Jo Hermans]

*** This bug has been marked as a duplicate of 251297 ***