Bug 842216

Summary:	dev-libs/kpathsea creates insecure 1777 directory in /var/cache/fonts
Product:	Gentoo Linux	Reporter:	Sandino Araico Sanchez <sandino>
Component:	Current packages	Assignee:	Alexis Ballier <aballier>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	gentoo, tex
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Sandino Araico Sanchez 2022-05-02 19:00:25 UTC

cat /usr/lib/tmpfiles.d/kpathsea.conf
d /var/cache/fonts 1777 root root -

equery  b /usr/lib/tmpfiles.d/kpathsea.conf
 * Searching for /usr/lib/tmpfiles.d/kpathsea.conf ... 
dev-libs/kpathsea-6.3.3_p20210325 (/usr/lib/tmpfiles.d/kpathsea.conf)


Reproducible: Always

Steps to Reproduce:
1. rm -rf /var/cache/fonts
2. reboot
3.
Actual Results:  
ls -la /var/cache/fonts/
total 12
4 drwxrwxrwt  3 root root 4096 jun 12  2017 .
4 drwxr-xr-x 15 root root 4096 oct 27  2020 ..


Expected Results:  
ls -la /var/cache/fonts/
total 12
4 drwxrwsr-x  3 root fonts 4096 jun 12  2017 .
4 drwxr-xr-x 15 root root 4096 oct 27  2020 ..