Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 114207 - sci-misc/qcad-parts-2.0.1.2: some files in /usr/share are world-writable
Summary: sci-misc/qcad-parts-2.0.1.2: some files in /usr/share are world-writable
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High trivial (vote)
Assignee: Gentoo Science Related Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-12-01 15:45 UTC by Andy
Modified: 2006-01-15 08:59 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
fix permissions of files/directories (qcad-file-permissions-gentoo.patch,736 bytes, patch)
2005-12-12 21:05 UTC, Markus Dittrich (RETIRED)
Details | Diff
updated ebuild (qcad-parts-2.0.1.2-r1.ebuild,1.10 KB, patch)
2006-01-07 11:34 UTC, Markus Dittrich (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Andy 2005-12-01 15:45:06 UTC
e.g. ls -al /usr/share/qcad-parts-2.0.1.2/mechanical/DIN_7991/M3/  
total 292  
drwxrwxr-x   2 root root  4096 Nov 22 17:56 .  
drwxr-xr-x  15 root root  4096 Nov 22 17:56 ..  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3_DIN7991_t.dat  
-rw-rw-rw-   1 root root  8632 Dec  2 02:46 M3_DIN7991_t.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3_DIN7991_w.dat  
-rw-rw-rw-   1 root root  8059 Dec  2 02:46 M3_DIN7991_w.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3x10_DIN7991_f.dat  
-rw-rw-rw-   1 root root 10075 Dec  2 02:46 M3x10_DIN7991_f.dxf  
-rw-r--r--   1 root root    63 Dec  2 02:46 M3x12_DIN7991_f.dat  
[...] 
 
I don't think this is needed. 
 

Reproducible: Always
Steps to Reproduce:
1. emerge -pv sci-misc/qcad-parts-2.0.1.2  
2. /usr/bin/find /usr/share/qcad-parts-2.0.1.2/ -type f \( -perm -2 \) -exec  
ls -l {} \; 2>/dev/null > writable.txt  
  
  
Actual Results:  
The file writable.txt that is created in 2. is not empty. 

Expected Results:  
Normally installed files shouldn't be world-writable.
Comment 1 Markus Dittrich (RETIRED) gentoo-dev 2005-12-12 21:05:03 UTC
Created attachment 74610 [details, diff]
fix permissions of files/directories

Hi,

Could you please test if the attached patch fixes the permission issues
on your machine and still allows the qcad files to be used properly.

Thanks,
Markus
Comment 2 Andy 2005-12-14 04:15:43 UTC
Patch seems to work.
One can still add parts from the library to an image.
Comment 3 Markus Dittrich (RETIRED) gentoo-dev 2006-01-07 11:34:12 UTC
Created attachment 76466 [details, diff]
updated ebuild

Sorry for the delay in responding. I have completely reworked the ebuild
and it would be great if you could test it with you qcad install
before I commit to portage.

Thanks,
Markus
Comment 4 Andy 2006-01-09 10:15:24 UTC
It works.
Comment 5 Markus Dittrich (RETIRED) gentoo-dev 2006-01-09 19:23:03 UTC
Hi Andy,

Thanks for testing!

qcad-parts-2.0.1.2-r1 has been committed to portage and fixes
the world writable files issue.

x86, ppc, amd64 folks: 
Since the ebuild only installs some helper files in /usr/share, could we 
possibly stabilize it soon in order to pull these world writable files out of
peoples' systems? 

Thanks,
Markus
Comment 6 Mark Loeser (RETIRED) gentoo-dev 2006-01-10 20:57:11 UTC
x86 done
Comment 7 Marcus D. Hanwell (RETIRED) gentoo-dev 2006-01-14 16:41:28 UTC
amd64 done.
Comment 8 Markus Dittrich (RETIRED) gentoo-dev 2006-01-15 08:59:54 UTC
qcad-parts-2.0.1.2-r1 has been stabilized on all supported arches.
Thanks all for your help!