[Lunar-bugs] [bug] odd permissions on certain files...

[sofar]

 Project:      lunar-linux
 ID:           
 Version:      <none>
 Component:    moonbase (modules)
 Category:     bug reports
 Priority:     normal
 Assigned to:  sofar
 Reported by:  v3rt1g0
 Updated by:   sofar
-Status:       active
+Status:       fixed

Fixed in theedge-20040926-16. Added tar options to strip owner and reset
permissions to something sane, which works (tested with ntp module).

sofar



Previous comments:
------------------------------------------------------------------------

Sun, 09/12/2004 - 01:14 : v3rt1g0

doing a 'find / \( -perm -02000 -o -perm -04000 \) -ls' on my system
turned up a few strange hits.  For those of you that do not know what
that command does, it bring back a list of all files that are setuserid
and/or setgroupid).  The sXids that caught my eye were...

(note: output was cleaned up for readability)
...
drwxrwsrwx  root:root Oct 15  2003 /usr/share/doc/ntp/conf
drwxr-sr-x  root:root Aug  4 09:56 /usr/share/doc/firefox/README
drwxr-sr-x  root:root Aug  4 09:56 /usr/share/doc/firefox/README/CVS
drwxr-sr-x  root:root Aug  4 09:47
/usr/share/doc/firefox/README/mozilla
drwxr-sr-x  root:root Aug  4 09:47
/usr/share/doc/firefox/README/mozilla/CVS
drwxr-sr-x  root:root Aug 21 19:53 /usr/share/doc/cdrtools/doc
...

Can anyone else confirm these modules install the aforementioned files
as sXids?  Does anyone know why they are like that?  Should they be?  I
would assume not, but there are always people that know something I do
not :)

There were a host of others too, but I assume they all have legitimate
reasons (passwd, ping, (u)mount, mail, write, et al)

------------------------------------------------------------------------

Sun, 09/12/2004 - 14:03 : sofar

confirmed... all sorts of strange stuff in /usr/share/doc going on!

------------------------------------------------------------------------

Sun, 09/26/2004 - 15:21 : sofar

these are coming from the original tarballs. We might have to pass
filter options to tar to prevent this. This would seem logical at this
point and the preferred fix as well to prevent this at all times.

-- 
View: http://lunar-linux.org/?q=node/view/433
Edit: http://lunar-linux.org/?q=project/comments/add/433