Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 842216 - dev-libs/kpathsea creates insecure 1777 directory in /var/cache/fonts
Summary: dev-libs/kpathsea creates insecure 1777 directory in /var/cache/fonts
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alexis Ballier
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-05-02 19:00 UTC by Sandino Araico Sanchez
Modified: 2022-08-13 11:14 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sandino Araico Sanchez 2022-05-02 19:00:25 UTC 
cat /usr/lib/tmpfiles.d/kpathsea.conf
d /var/cache/fonts 1777 root root -

equery  b /usr/lib/tmpfiles.d/kpathsea.conf
 * Searching for /usr/lib/tmpfiles.d/kpathsea.conf ... 
dev-libs/kpathsea-6.3.3_p20210325 (/usr/lib/tmpfiles.d/kpathsea.conf)


Reproducible: Always

Steps to Reproduce:
1. rm -rf /var/cache/fonts
2. reboot
3.
Actual Results:  
ls -la /var/cache/fonts/
total 12
4 drwxrwxrwt  3 root root 4096 jun 12  2017 .
4 drwxr-xr-x 15 root root 4096 oct 27  2020 ..


Expected Results:  
ls -la /var/cache/fonts/
total 12
4 drwxrwsr-x  3 root fonts 4096 jun 12  2017 .
4 drwxr-xr-x 15 root root 4096 oct 27  2020 ..