Bug 114207 - sci-misc/qcad-parts-2.0.1.2: some files in /usr/share are world-writable
Bug#: 114207 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: trivial Priority: P2
Resolution: FIXED Assigned To: sci@gentoo.org Reported By: andyreif@studcs.uni-sb.de
Component: Ebuilds
URL: 
Summary: sci-misc/qcad-parts-2.0.1.2: some files in /usr/share are world-writable
Keywords:  
Status Whiteboard: 
Opened: 2005-12-01 15:45 0000
Description:   Opened: 2005-12-01 15:45 0000 
e.g. ls -al /usr/share/qcad-parts-2.0.1.2/mechanical/DIN_7991/M3/  
total 292  
drwxrwxr-x   2 root root  4096 Nov 22 17:56 .  
drwxr-xr-x  15 root root  4096 Nov 22 17:56 ..  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3_DIN7991_t.dat  
-rw-rw-rw-   1 root root  8632 Dec  2 02:46 M3_DIN7991_t.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3_DIN7991_w.dat  
-rw-rw-rw-   1 root root  8059 Dec  2 02:46 M3_DIN7991_w.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3x10_DIN7991_f.dat  
-rw-rw-rw-   1 root root 10075 Dec  2 02:46 M3x10_DIN7991_f.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3x12_DIN7991_f.dat  
[...] 
 
I don't think this is needed. 
 

Reproducible: Always
Steps to Reproduce:
1. emerge -pv sci-misc/qcad-parts-2.0.1.2  
2. /usr/bin/find /usr/share/qcad-parts-2.0.1.2/ -type f \( -perm -2 \) -exec  
ls -l {} \; 2>/dev/null > writable.txt  
  
  
Actual Results:  
The file writable.txt that is created in 2. is not empty. 

Expected Results:  
Normally installed files shouldn't be world-writable.

------- Comment #1 From Markus Dittrich 2005-12-12 21:05:03 0000 ------- 
Created an attachment (id=74610) [details]
fix permissions of files/directories

Hi,

Could you please test if the attached patch fixes the permission issues
on your machine and still allows the qcad files to be used properly.

Thanks,
Markus

------- Comment #2 From Andy 2005-12-14 04:15:43 0000 ------- 
Patch seems to work.
One can still add parts from the library to an image.

------- Comment #3 From Markus Dittrich 2006-01-07 11:34:12 0000 ------- 
Created an attachment (id=76466) [details]
updated ebuild

Sorry for the delay in responding. I have completely reworked the ebuild
and it would be great if you could test it with you qcad install
before I commit to portage.

Thanks,
Markus

------- Comment #4 From Andy 2006-01-09 10:15:24 0000 ------- 
It works.

------- Comment #5 From Markus Dittrich 2006-01-09 19:23:03 0000 ------- 
Hi Andy,

Thanks for testing!

qcad-parts-2.0.1.2-r1 has been committed to portage and fixes
the world writable files issue.

x86, ppc, amd64 folks: 
Since the ebuild only installs some helper files in /usr/share, could we 
possibly stabilize it soon in order to pull these world writable files out of
peoples' systems? 

Thanks,
Markus

------- Comment #6 From Mark Loeser 2006-01-10 20:57:11 0000 ------- 
x86 done

------- Comment #7 From Marcus D. Hanwell 2006-01-14 16:41:28 0000 ------- 
amd64 done.

------- Comment #8 From Markus Dittrich 2006-01-15 08:59:54 0000 ------- 
qcad-parts-2.0.1.2-r1 has been stabilized on all supported arches.
Thanks all for your help!