summaryrefslogtreecommitdiffstats
path: root/Doc/library
diff options
context:
space:
mode:
authorR David Murray <rdmurray@bitdance.com>2013-09-18 01:04:50 (GMT)
committerR David Murray <rdmurray@bitdance.com>2013-09-18 01:04:50 (GMT)
commitfb9dc0b3ae1e048c89988fcf4c570cd73da2f455 (patch)
treef70ecd0a43885b9aae730cfe013bbbd0bb373572 /Doc/library
parentdafea851901fc1de278ad79727d3b44f46ba5a31 (diff)
parent8270a2c209836c49fb2909c3af6117c46439b86e (diff)
downloadcpython-fb9dc0b3ae1e048c89988fcf4c570cd73da2f455.zip
cpython-fb9dc0b3ae1e048c89988fcf4c570cd73da2f455.tar.gz
cpython-fb9dc0b3ae1e048c89988fcf4c570cd73da2f455.tar.bz2
Merge #14984: On POSIX, enforce permissions when reading default .netrc.
Diffstat (limited to 'Doc/library')
-rw-r--r--Doc/library/netrc.rst8
1 files changed, 8 insertions, 0 deletions
diff --git a/Doc/library/netrc.rst b/Doc/library/netrc.rst
index 3f38cbc..564f101 100644
--- a/Doc/library/netrc.rst
+++ b/Doc/library/netrc.rst
@@ -22,6 +22,14 @@ the Unix :program:`ftp` program and other FTP clients.
no argument is given, the file :file:`.netrc` in the user's home directory will
be read. Parse errors will raise :exc:`NetrcParseError` with diagnostic
information including the file name, line number, and terminating token.
+ If no argument is specified on a POSIX system, the presence of passwords in
+ the :file:`.netrc` file will raise a :exc:`NetrcParseError` if the file
+ ownership or permissions are insecure (owned by a user other than the user
+ running the process, or accessible for read or write by any other user).
+ This implements security behavior equivalent to that of ftp and other
+ programs that use :file:`.netrc`.
+
+ .. versionchanged:: 3.3.3 Added the POSIX permission check.
.. exception:: NetrcParseError