Bug 660520

Summary:	dev-qt/qtquickcontrols-5.11.1 - QA Security Notice: world writable file(s)
Product:	Gentoo Linux	Reporter:	Francesco Turco <fturco>
Component:	Current packages	Assignee:	Qt Bug Alias <qt>
Status:	RESOLVED WORKSFORME
Severity:	QA	CC:	jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	build.log.xz emerge-info.txt

Description Francesco Turco 2018-07-06 13:54:07 UTC

Created attachment 538560 [details]
build.log.xz

Portage reports the following QA Security Notice when emerging dev-qt/qtquickcontrols-5.11.1:

> QA Security Notice: world writable file(s):
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/CircularButton.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/CircularButtonStyleHelper.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/CircularTickmarkLabel.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/Handle.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/PieMenuIcon.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/Private/TextSingleton.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/designer/CircularGaugeSpecifics.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/designer/DelayButtonSpecifics.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/designer/DialSpecifics.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/designer/GaugeSpecifics.qmlc
>   /usr/lib64/qt5/qml/QtQuick/Extras/designer/PictureSpecifics.qmlc
>   ...

--------

$ emerge -pv qtquickcontrols

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] dev-qt/qtquickcontrols-5.11.1:5/5.11::gentoo  USE="widgets -debug {-test}" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB

Comment 1 Francesco Turco 2018-07-06 13:54:37 UTC

Created attachment 538562 [details]
emerge-info.txt

emerge --info

Comment 2 Davide Pesavento (RETIRED) gentoo-dev

2018-12-16 02:35:10 UTC

I cannot reproduce with 5.11.3