Created attachment 538564 [details] build.log.xz Portage reports the following QA security notice when emerging dev-qt/qtgraphicaleffects-5.11.1: > QA Security Notice: world writable file(s): > /usr/lib64/qt5/qml/QtGraphicalEffects/private/DropShadowBase.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastGlow.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastInnerShadow.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastMaskedBlur.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianDirectionalBlur.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianGlow.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianInnerShadow.qmlc > /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianMaskedBlur.qmlc > This may or may not be a security problem, most of the time it is one. > Please double check that qtgraphicaleffects-5.11.1 really needs a world writeable bit and file bugs accordingly. ------------ $ emerge -pv qtgraphicaleffects These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R ] dev-qt/qtgraphicaleffects-5.11.1:5/5.11::gentoo USE="-debug {-test}" 0 KiB Total: 1 package (1 reinstall), Size of downloads: 0 KiB
Created attachment 538566 [details] emerge-info.txt emerge --info
I cannot reproduce with 5.11.3
Can reproduce it in 5.12.3 * QA Security Notice: world writable file(s): * /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianGlow.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianInnerShadow.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastInnerShadow.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/DropShadowBase.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastGlow.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianDirectionalBlur.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/GaussianMaskedBlur.qmlc * /usr/lib64/qt5/qml/QtGraphicalEffects/private/FastMaskedBlur.qmlc $ emerge --info dev-qt/qtgraphicaleffects Portage 2.3.66 (python 3.6.5-final-0, platforms/pc, gcc-8.2.0, glibc-2.29-r2, 4.19.52-gentoo x86_64) ================================================================= System Settings ================================================================= System uname: Linux-4.19.52-gentoo-x86_64-Intel-R-_Core-TM-_i3_CPU_M_330_@_2.13GHz-with-gentoo-2.6 KiB Mem: 8154356 total, 3502400 free KiB Swap: 2097148 total, 2097148 free Head commit of repository gentoo: b39c8a170556213022b7c966989e38560f6201e7 sh bash 4.4_p23-r1 ld GNU ld (Gentoo 2.30 p5) 2.30.0 app-shells/bash: 4.4_p23-r1::gentoo dev-java/java-config: 2.2.0-r4::gentoo dev-lang/perl: 5.28.2-r1::gentoo dev-lang/python: 2.7.15::gentoo, 3.6.5::gentoo dev-util/cmake: 3.14.3::gentoo sys-apps/baselayout: 2.6-r1::gentoo sys-apps/openrc: 0.41.2::lanodanOverlay sys-apps/sandbox: 2.13::gentoo sys-devel/autoconf: 2.13-r1::gentoo, 2.69-r4::gentoo sys-devel/automake: 1.11.6-r3::gentoo, 1.14.1-r2::gentoo, 1.15.1-r2::gentoo, 1.16.1-r1::gentoo sys-devel/binutils: 2.30-r4::gentoo, 2.31.1-r6::gentoo, 2.32-r1::gentoo sys-devel/gcc: 8.2.0-r6::gentoo, 8.3.0-r1::gentoo sys-devel/gcc-config: 2.0::gentoo sys-devel/libtool: 2.4.6-r3::gentoo sys-devel/make: 4.2.1-r4::gentoo sys-kernel/linux-headers: 4.14-r1::gentoo (virtual/os-headers) sys-libs/glibc: 2.29-r2::gentoo Repositories: crossdev location: /usr/local/portage-crossdev masters: gentoo priority: 10 4nykey location: /var/lib/layman/4nykey sync-type: laymansync sync-uri: https://github.com/4nykey/4nykey.git masters: gentoo priority: 50 ArtSoftware location: /var/lib/layman/ArtSoftware sync-type: laymansync sync-uri: http://git.art-software.fr/ArtSoftware/portageLocalRepo.git masters: gentoo priority: 50 audio-overlay location: /var/lib/layman/audio-overlay sync-type: laymansync sync-uri: https://github.com/gentoo-audio/audio-overlay.git masters: gentoo priority: 50 bobwya location: /var/lib/layman/bobwya sync-type: laymansync sync-uri: https://github.com/bobwya/miscellaneous_ebuilds.git masters: gentoo priority: 50 cg location: /var/lib/layman/cg sync-type: laymansync sync-uri: https://github.com/brothermechanic/cg.git masters: gentoo priority: 50 dotnet location: /var/lib/layman/dotnet sync-type: laymansync sync-uri: https://github.com/gentoo/dotnet.git masters: gentoo priority: 50 earshark location: /var/lib/layman/earshark sync-type: laymansync sync-uri: https://github.com/Chemrat/overlay.git masters: gentoo priority: 50 gamerlay location: /var/lib/layman/gamerlay sync-type: laymansync sync-uri: https://anongit.gentoo.org/git/proj/gamerlay.git masters: gentoo priority: 50 gnome-next location: /var/lib/layman/gnome-next sync-type: laymansync sync-uri: https://github.com/Heather/gentoo-gnome.git masters: gentoo priority: 50 go-overlay location: /var/lib/layman/go-overlay sync-type: laymansync sync-uri: https://github.com/Dr-Terrible/go-overlay.git masters: gentoo priority: 50 haskell location: /var/lib/layman/haskell sync-type: laymansync sync-uri: https://github.com/gentoo-haskell/gentoo-haskell.git masters: gentoo priority: 50 jorgicio location: /var/lib/layman/jorgicio sync-type: laymansync sync-uri: https://github.com/jorgicio/jorgicio-gentoo.git masters: gentoo priority: 50 khoverlay location: /var/lib/layman/khoverlay sync-type: laymansync sync-uri: https://gitlab.com/khumba/khoverlay.git masters: gentoo priority: 50 laurentb location: /var/lib/layman/laurentb sync-type: laymansync sync-uri: git://github.com/laurentb/gentoo-overlay.git masters: gentoo priority: 50 lua location: /var/lib/layman/lua sync-type: laymansync sync-uri: https://anongit.gentoo.org/git/proj/lua.git masters: gentoo priority: 50 matrix location: /var/lib/layman/matrix sync-type: laymansync sync-uri: https://gitlab.com/PureTryOut/matrix-overlay.git masters: gentoo priority: 50 mva location: /var/lib/layman/mva sync-type: laymansync sync-uri: https://github.com/msva/mva-overlay masters: gentoo priority: 50 pentoo location: /var/lib/layman/pentoo sync-type: laymansync sync-uri: https://github.com/pentoo/pentoo-overlay.git masters: gentoo priority: 50 science location: /var/lib/layman/science sync-type: laymansync sync-uri: https://anongit.gentoo.org/git/proj/sci.git masters: gentoo priority: 50 vampire location: /var/lib/layman/vampire sync-type: laymansync sync-uri: https://github.com/TheCrueltySage/vampire-overlay.git masters: gentoo priority: 50 guru location: /var/lib/layman/guru sync-type: laymansync sync-uri: https://anongit.gentoo.org/git/repo/proj/guru.git masters: gentoo priority: 90 gentoo location: /usr/portage sync-type: git sync-uri: https://anongit.gentoo.org/git/repo/gentoo.git priority: 100 flussence location: /var/lib/layman/flussence sync-type: laymansync sync-uri: https://gitlab.com/flussence/overlay.git masters: gentoo priority: 110 libressl location: /var/lib/layman/libressl sync-type: laymansync sync-uri: git+ssh://git@git.gentoo.org/repo/proj/libressl.git masters: gentoo priority: 110 lanodanOverlay location: /var/lib/layman/lanodanOverlay sync-type: laymansync sync-uri: https://hacktivis.me/git/overlay.git masters: gentoo lua priority: 150 Installed sets: @gajim-omemo ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="@FREE" CBUILD="x86_64-pc-linux-gnu" CC="clang" CFLAGS="-O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/grs/systems.conf /etc/stunnel/stunnel.conf /lib/udev/rules.d/ /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXX="clang++" CXXFLAGS="-O2 -pipe" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--keep-going" ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned sandbox sfperms sign splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync webrsync-gpg xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="https://mirror.swordarmor.fr/gentoo/ https://mirrors.dotsrc.org/gentoo/ https://gentoo.osuosl.org/ http://distfiles.gentoo.org" INSTALL_MASK="/usr/lib/systemd /usr/lib64/systemd /lib/systemd /etc/systemd /etc/sudoers /etc/sudoers.d /usr/share/bash-completion /usr/share/zsh/site-functions" LANG="en_DK.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" PKGDIR="/usr/portage/packages" PORTAGE_COMPRESS="true" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="(dri) X acl acpi alsa amd64 bzip2 cacert canna caps cjk clang crypt cryptsetup cxx d3d9 dane developer egl eme-free fontconfig force-gtk3 gif glamor gles gold gpm grammar gtk3 hardened iconv icu idn injection iproute2 ipv6 jpeg jumbo-build latex lcms libcxx libkms libproxy libressl libtirpc libzfs llvm lm_sensors luajit mandoc mikmod mod modplug multilib ncurses net40 net45 net46 nls nntp nptl opengl openmp pam pcre pie png readline sasl seccomp smp socks5 spell split-usr ssl ssp startup-notification stunnel symlink system-av1 system-binutils system-boost system-bootloader system-bootstrap system-cairo system-clang system-cmark system-crontab system-digest system-ffmpeg system-harfbuzz system-heimdal system-icu system-ipxe system-jpeg system-jsoncpp system-lcms system-leveldb system-libevent system-libs system-libvpx system-libyaml system-llvm system-lua system-lz4 system-mitkrb5 system-qemu system-renpy system-seabios system-snappy system-sqlite system-ssl system-tbb system-uulib system-webp system-wide system-zlib threads truetype unicode upnp urandom v4l vaapi vdpau wayland webp xa xattr xbuild xcb xcsecurity xft xinerama xtpax xvmc zlib" ABI_X86="64" ALSA_CARDS="hda-intel usb-audio" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" CURL_SSL="libressl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="libinput wacom" KERNEL="linux" L10N="en en-US en-GB fr fr-CA ja is jbo de de-DE ru" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LIRC_DEVICES="all" NETBEANS_MODULES="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb php profiler soa visualweb webcommon websvccommon xml" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres9_6" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python3_6" QEMU_SOFTMMU_TARGETS="x86_64 arm arm64 i386 sparc64" QEMU_USER_TARGETS="x86_64 arm arm64 i386 sparc64" RUBY_TARGETS="ruby24" USERLAND="GNU" VIDEO_CARDS="nouveau (nvidia) (virgl)" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, LC_ALL, LINGUAS, MAKEOPTS, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS ================================================================= Package Settings ================================================================= dev-qt/qtgraphicaleffects-5.12.3::gentoo was built with the following: USE="-debug -test" ABI_X86="(64)" FEATURES="usersandbox distlocks webrsync-gpg binpkg-dostrip ebuild-locks fixlafiles parallel-fetch multilib-strict assume-digests news config-protect-if-modified strict sfperms preserve-libs unmerge-orphans xattr binpkg-docompress protect-owned merge-sync network-sandbox userpriv sandbox unmerge-logs userfetch unknown-features-warn ipc-sandbox binpkg-logs pid-sandbox usersync splitdebug"
