[Python-Dev] Daemon creation code in the standard library (was: Inherance of file descriptor and handles on Windows (PEP 446))

Cameron Simpson cs at zip.com.au
Fri Jul 26 05:48:14 CEST 2013


On 25Jul2013 17:26, Antoine Pitrou <solipsis at pitrou.net> wrote:
| Le Thu, 25 Jul 2013 12:08:18 +1000,
| Ben Finney <ben+python at benfinney.id.au> a écrit :
| > Work continues on the PEP 3143-compatible ‘python-daemon’, porting it
| > to Python 3 and aiming for inclusion in the standard library.
| 
| The PEP hasn't been formally accepted yet, however.
| Skimming back through the archives, one sticking point was the default
| value of the "umask" parameter. Setting the umask to 0 if the user
| didn't ask for something else is a disaster, security-wise.

I have to say, +10 here.

I have always found the convention that daemons have a umask of 0
to be utterly bogus, because almost all library code relies on the
umask to set default security policy for initial file permissions.

Prone to rant on this at length if required...

Cheers,
-- 
Cameron Simpson <cs at zip.com.au>

Cordless hoses have been around for quite some time. They're called buckets.
        - Dan Prener <prener at watson.ibm.com>


More information about the Python-Dev mailing list