Bug 925512

Summary:	sys-process/fcron-3.3.1-r1 installs system executables owned by nonzero uid
Product:	Gentoo Linux	Reporter:	Agostino Sarubbo <ago>
Component:	Current packages	Assignee:	Alexey <alexey+gentoo>
Status:	CONFIRMED ---
Severity:	normal	CC:	alexey+gentoo, proxy-maint
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	build.log

Description Agostino Sarubbo gentoo-dev

2024-02-25 20:13:42 UTC

https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: sys-process/fcron-3.3.1 installs system executables owned by nonzero uid.
Discovered on: arm64 (internal ref: tinderbox_arm64)
System: GCC-14-SYSTEM (https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#GCC-14)

Comment 1 Agostino Sarubbo gentoo-dev

2024-02-25 20:13:43 UTC

Created attachment 886003 [details]
build.log

build log and emerge --info

Comment 2 Alexey 2024-03-04 01:52:14 UTC

This is intended. Otherwise we either get this error when running crontab:

ERROR could not change euid to 999: Operation not permitted

Or this file is suid with root, which is much worse.

Comment 3 Agostino Sarubbo gentoo-dev

2024-03-09 14:40:07 UTC

ci has reproduced this issue with version 3.3.1-r1 - Updating summary.