d8bad9926c

Daniel Stenberg

2025-11-07

SUCCESS Duration: 141s

Subject

docs: mention umask need when curl creates files

No binary (build failed)

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

(log yok)

.github/scripts/pyspelling.words+1 -0

docs/cmdline-opts/alt-svc.md+3 -0

@@ -24,5 +24,8 @@ filename again if it has been modified.
	Specify a "" filename (zero length) to avoid loading/saving and make curl just
	handle the cache in memory.

+	You may want to restrict your umask to prevent other users on the same system
+	to access the created file.
+
	If this option is used several times, curl loads contents from all the
	files but the last one is used for saving.

docs/cmdline-opts/cookie-jar.md+3 -0

@@ -37,3 +37,6 @@ If the cookie jar cannot be created or written to, the whole curl operation
	does not fail or even report an error clearly. Using --verbose gets a warning
	displayed, but that is the only visible feedback you get about this possibly
	lethal situation.
+
+	You may want to restrict your umask to prevent other users on the same system
+	to access the created file.

docs/cmdline-opts/hsts.md+3 -0

@@ -28,5 +28,8 @@ performed.
	Specify a "" filename (zero length) to avoid loading/saving and make curl just
	handle HSTS in memory.

+	You may want to restrict your umask to prevent other users on the same system
+	to access the created file.
+
	If this option is used several times, curl loads contents from all the
	files but the last one is used for saving.

docs/libcurl/opts/CURLOPT_ALTSVC.md+4 -0

@@ -47,6 +47,10 @@ libcurl cannot fully protect against attacks where an attacker has write
	access to the same directory where it is directed to save files. This is
	particularly sensitive if you save files using elevated privileges.

+	libcurl creates the file to store the alt-svc cache in using default file
+	permissions, meaning that on *nix systems you may need to restrict your umask
+	to prevent other users on the same system to access the file.
+
	# DEFAULT

	NULL. The alt-svc cache is not read nor written to file.

docs/libcurl/opts/CURLOPT_COOKIEJAR.md+4 -0

@@ -58,6 +58,10 @@ libcurl cannot fully protect against attacks where an attacker has write
	access to the same directory where it is directed to save files. This is
	particularly sensitive if you save files using elevated privileges.

+	libcurl creates the file to store cookies using default file permissions,
+	meaning that on *nix systems you may need to restrict your umask to prevent
+	other users on the same system to access the file.
+
	# DEFAULT

	NULL

docs/libcurl/opts/CURLOPT_HSTS.md+4 -0

@@ -67,6 +67,10 @@ libcurl cannot fully protect against attacks where an attacker has write
	access to the same directory where it is directed to save files. This is
	particularly sensitive if you save files using elevated privileges.

+	libcurl creates the file to store HSTS data in using default file permissions,
+	meaning that on *nix systems you may need to restrict your umask to prevent
+	other users on the same system to access the file.
+
	# %PROTOCOLS%

	# EXAMPLE