Bug 682242

Summary:	sys-apps/heirloom-tools-070715-r1 : QA Security Notice: world writable file(s):
Product:	Gentoo Linux	Reporter:	Toralf Förster <toralf>
Component:	Current packages	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED OBSOLETE
Severity:	QA	CC:	bkohler, patrick
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	elog-sys-apps:heirloom-tools-070715-r1:20190401-061052.log etc.portage.tbz2 sys-apps:heirloom-tools-070715-r1:20190401-060848.log

Description Toralf Förster gentoo-dev

2019-04-01 17:20:15 UTC

Please fix the ebuild to use correct FHS/Gentoo policy paths.
QA Security Notice: world writable file(s):
  /var/adm/spellhist
This may or may not be a security problem, most of the time it is one.
Please double check that heirloom-tools-070715-r1 really needs a world writeable bit and file bugs accordingly.


  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_20190327-141919

  -------------------------------------------------------------------

Comment 1 Toralf Förster gentoo-dev

2019-04-01 17:20:18 UTC

Created attachment 571460 [details]
elog-sys-apps:heirloom-tools-070715-r1:20190401-061052.log

Comment 2 Toralf Förster gentoo-dev

2019-04-01 17:20:21 UTC

Created attachment 571462 [details]
etc.portage.tbz2

Comment 3 Toralf Förster gentoo-dev

2019-04-01 17:20:24 UTC

Created attachment 571464 [details]
sys-apps:heirloom-tools-070715-r1:20190401-060848.log

Comment 4 Ben Kohler gentoo-dev

2021-03-29 15:04:54 UTC

Seems to have been fixed a revision or 2 ago