Debian bug report logs - #1549
bash should not have world-readable history

Message received at debian-bugs:

From cus.cam.ac.uk!iwj10 Wed Oct  4 17:26:49 1995
Return-Path: <iwj10@cus.cam.ac.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t0e9A-0008ozC; Wed, 4 Oct 95 17:26 PDT
Received: from bootes.cus.cam.ac.uk by pixar.com with SMTP id AA08166
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Wed, 4 Oct 1995 17:26:26 -0700
Received: by bootes.cus.cam.ac.uk 
	(Smail-3.1.29.0 #36) id m0t0dMY-000BzdC; Thu, 5 Oct 95 00:36 BST
Received: by chiark
	id <m0t0d9q-0002aGZ@chiark.al.cl.cam.ac.uk>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Thu, 5 Oct 95 00:23 BST
Message-Id: <m0t0d9q-0002aGZ@chiark.al.cl.cam.ac.uk>
Date: Thu, 5 Oct 95 00:23 BST
From: Ian Jackson <iwj10@cus.cam.ac.uk>
To: Debian bugs submission address <debian-bugs@pixar.com>
Subject: bash should not have world-readable history

Package: bash
Version: 1.14.4-2

bash has a very annoying habit of creating a world-readable
.bash_history file, if you let it.

I have solved this problem by putting creating a mode 600 empty file
/etc/skel/.bash_history, so that the file already has the right
permissions when bash starts to use it.

There are other obvious solutions to the problem - I don't know which
is best, but something should be done.

Ian.