Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 682242 - sys-apps/heirloom-tools-070715-r1 : QA Security Notice: world writable file(s):
Summary: sys-apps/heirloom-tools-070715-r1 : QA Security Notice: world writable file(s):
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal QA (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-04-01 17:20 UTC by Toralf Förster
Modified: 2021-03-29 15:04 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
elog-sys-apps:heirloom-tools-070715-r1:20190401-061052.log (elog-sys-apps:heirloom-tools-070715-r1:20190401-061052.log,615 bytes, text/plain)
2019-04-01 17:20 UTC, Toralf Förster 		Details
etc.portage.tbz2 (etc.portage.tbz2,16.18 KB, application/x-bzip)
2019-04-01 17:20 UTC, Toralf Förster 		Details
sys-apps:heirloom-tools-070715-r1:20190401-060848.log (sys-apps:heirloom-tools-070715-r1:20190401-060848.log,329.47 KB, text/plain)
2019-04-01 17:20 UTC, Toralf Förster 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Toralf Förster gentoo-dev 2019-04-01 17:20:15 UTC 
Please fix the ebuild to use correct FHS/Gentoo policy paths.
QA Security Notice: world writable file(s):
  /var/adm/spellhist
This may or may not be a security problem, most of the time it is one.
Please double check that heirloom-tools-070715-r1 really needs a world writeable bit and file bugs accordingly.


  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_20190327-141919

  -------------------------------------------------------------------
Comment 1 Toralf Förster gentoo-dev 2019-04-01 17:20:18 UTC 
Created attachment 571460 [details]
elog-sys-apps:heirloom-tools-070715-r1:20190401-061052.log
Comment 2 Toralf Förster gentoo-dev 2019-04-01 17:20:21 UTC 
Created attachment 571462 [details]
etc.portage.tbz2
Comment 3 Toralf Förster gentoo-dev 2019-04-01 17:20:24 UTC 
Created attachment 571464 [details]
sys-apps:heirloom-tools-070715-r1:20190401-060848.log
Comment 4 Ben Kohler gentoo-dev 2021-03-29 15:04:54 UTC 
Seems to have been fixed a revision or 2 ago