Bugzilla Bug 204433

/var/cache/fonts is world writable since tex needs this to create font cache.
Having such a directory world writable can be a security risk.
This can be solved simply creating a group "texusers", and giving write access
to /var/cache/fonts only to that group.
The only downside would be that users that need to use tex (and willing to use
font cache feature) would be required to belong such a group.

Reproducible: Always

I don't see anything in tetex stuff that'd create that dir world writable...

this is done in texmf-update, this is a known one, there are docs in kpathsea
about it that says the "security" risk is very low.
There are other issues aswell.

see:
http://groups.google.com/group/linux.gentoo.dev/browse_thread/thread/bf2e58fe200c0676/b72be3596cd2eb31

(In reply to comment #2)
> this is done in texmf-update, this is a known one

forced /var/cache/fonts to be world writable will be dropped from texlive 2008


> There are other issues aswell.

which should all be fixed by now

(In reply to comment #3)
> (In reply to comment #2)
> > this is done in texmf-update, this is a known one
> 
> forced /var/cache/fonts to be world writable will be dropped from texlive 2008

now tl2008 is in the tree, still masked though, let's close this one anyway so
that I can keep track easily of unfixed bugs.