According to [1] and the linked url at [2] the permissions for /var/db/sudo should be changed from 0700 to 0711. The package Makefile has this: $(INSTALL) -d -O $(install_uid) -G $(install_gid) -m 0711 $(DESTDIR)$(vardir) [1] https://git.archlinux.org/svntogit/packages.git/tree/trunk/sudo.install?h=packages/sudo [2] https://www.sudo.ws/repos/sudo/rev/5c38d77a2d0c Reproducible: Always
Created attachment 527132 [details] emerge --info
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1356682e697263cf3cbf3f252365a5aaac55350a commit 1356682e697263cf3cbf3f252365a5aaac55350a Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2018-04-11 11:01:47 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2018-04-11 11:02:19 +0000 app-admin/sudo: Fixed permissions of /var/db/sudo Closes: https://bugs.gentoo.org/652958 Package-Manager: Portage-2.3.28, Repoman-2.3.9 app-admin/sudo/{sudo-1.8.22.ebuild => sudo-1.8.22-r1.ebuild} | 7 ++++--- app-admin/sudo/sudo-1.8.23_beta2.ebuild | 7 ++++--- app-admin/sudo/sudo-9999.ebuild | 7 ++++--- 3 files changed, 12 insertions(+), 9 deletions(-)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7c05e207dad4f635796bb3bd04cc38fbe46adfc7 commit 7c05e207dad4f635796bb3bd04cc38fbe46adfc7 Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2018-04-11 18:06:21 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2018-04-11 18:06:36 +0000 app-admin/sudo: Fixed /var/db/sudo permissions for real. Thanks to Arfrever for pointing out that portage does not change permissions on alrady existing directories. Bug: https://bugs.gentoo.org/652958 Package-Manager: Portage-2.3.28, Repoman-2.3.9 app-admin/sudo/{sudo-1.8.22-r1.ebuild => sudo-1.8.22-r2.ebuild} | 6 ++++++ app-admin/sudo/sudo-1.8.23_beta2.ebuild | 6 ++++++ app-admin/sudo/sudo-9999.ebuild | 6 ++++++ 3 files changed, 18 insertions(+)}