Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 711598

Summary: sys-process/at-3.2.1 - QA notice - system executables owned by nonzero uid
Product: Gentoo Linux Reporter: Francesco Turco <fturco>
Component: Current packagesAssignee: Zoltan Puskas <zoltan>
Status: RESOLVED FIXED    
Severity: normal CC: flow, jstein, lssndrbarbieri, proxy-maint
Priority: Normal Keywords: PullRequest
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://bugs.debian.org/251058
https://github.com/gentoo/gentoo/pull/32113
Whiteboard:
Package list:
Runtime testing required: ---

Description Francesco Turco 2020-03-05 13:21:06 UTC
Portage reports the following QA notice when emerging sys-process/at-3.2.1:

> QA: other
> system executables owned by nonzero uid:
>   /usr/bin/at
>   /usr/bin/atq
>   /usr/bin/atrm

/usr/bin/at belongs to the "at" user on my system:

$ ls -l /usr/bin/{at,atq,atrm}
-rwsr-s--x 1 at   at   56120 Mar  5 14:15 /usr/bin/at
lrwxrwxrwx 1 root root     2 Mar  5 14:15 /usr/bin/atq -> at
lrwxrwxrwx 1 root root     2 Mar  5 14:15 /usr/bin/atrm -> at
Comment 1 Zoltan Puskas 2023-02-17 08:22:25 UTC
In Debian the `at` binary owned by daemon:daemon, I assume previous maintainer followed the same logic here. I'll investigate.
Comment 2 Zoltan Puskas 2023-02-17 08:23:04 UTC
Old Debian bug where this has been set: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=251058
Comment 3 Larry the Git Cow gentoo-dev 2023-08-09 18:15:17 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=681086e7c5050ab59ecf09c139470ee8408af6d6

commit 681086e7c5050ab59ecf09c139470ee8408af6d6
Author:     Zoltan Puskas <zoltan@sinustrom.info>
AuthorDate: 2023-07-30 22:30:40 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-08-09 18:14:48 +0000

    sys-process/at: Fix several installation issues
    
    - Fix `at` binary ownership
    - Remove `pkg_postinst()` since Makefile actually sets the ownership and
      permissions as needed. Fix broken permission by keepdir in scr_install
      instead.
    
    Closes: https://bugs.gentoo.org/658460
    Closes: https://bugs.gentoo.org/711598
    Signed-off-by: Zoltan Puskas <zoltan@sinustrom.info>
    Closes: https://github.com/gentoo/gentoo/pull/32113
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-process/at/at-3.2.5-r2.ebuild                  | 91 ++++++++++++++++++++++
 .../at-3.2.5-Makefile.binary-permission-fix.patch  | 12 +++
 2 files changed, 103 insertions(+)