Bug 309997 – dev-texlive/texlive-fontsextra-2009 installs world writable files

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Marek Sapota 2010-03-17 20:27:23 UTC]

dev-texlive/texlive-fontsextra-2009 installs files with chmod 0666 instead of 0644.

One of portage warnings:
QA Security Notice:
- /usr/share/texmf-dist/tex/latex/eulervm/uzeuex.fd will be a world writable file.
- This may or may not be a security problem, most of the time it is one.
- Please double check that texlive-fontsextra-2009 really needs a world writeable bit and file bugs accordingly.

Reproducible: Always

[Comment 1 Alexis Ballier 2010-06-11 11:38:12 UTC]

$ ls -lh /usr/share/texmf-dist/tex/latex/eulervm/uzeuex.fd 
-rw-r--r-- 1 root root 1005 Feb  2  2007 /usr/share/texmf-dist/tex/latex/eulervm/uzeuex.fd

why do you get that file world writable ???

[Comment 2 Marek Sapota 2010-06-11 12:18:20 UTC]

Well, I have no idea - I haven't touched the ebuild or anything.

$ ls -lh /usr/share/texmf-dist/tex/latex/eulervm/uzeuex.fd 
-rw-rw-rw- 1 root root 1005 Feb  2  2007 /usr/share/texmf-dist/tex/latex/eulervm/uzeuex.fd

[Comment 3 Qin Jue Hang 2010-09-07 15:16:56 UTC]

I have the same problem, he is not alone. It installs with those permissions for all the files (I think). Thankfully those are files.

[Comment 4 Andreas K. Hüttel 2010-10-03 12:40:08 UTC]

Which versions of zip/unzip/... have you installed?

[Comment 5 Marek Sapota 2010-10-07 18:00:02 UTC]

zip 3.0
unzip 6.0-r1

[Comment 6 Alexis Ballier 2010-11-07 19:24:37 UTC]

should be fixed now with my latest commit to texlive-module.eclass; it'll force a 022 umask