Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 925512 - sys-process/fcron-3.3.1-r1 installs system executables owned by nonzero uid
Summary: sys-process/fcron-3.3.1-r1 installs system executables owned by nonzero uid
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alexey
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-02-25 20:13 UTC by Agostino Sarubbo
Modified: 2024-03-09 14:40 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
build.log (build.log,77.25 KB, text/plain)
2024-02-25 20:13 UTC, Agostino Sarubbo 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2024-02-25 20:13:42 UTC 
https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: sys-process/fcron-3.3.1 installs system executables owned by nonzero uid.
Discovered on: arm64 (internal ref: tinderbox_arm64)
System: GCC-14-SYSTEM (https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#GCC-14)
Comment 1 Agostino Sarubbo gentoo-dev 2024-02-25 20:13:43 UTC 
Created attachment 886003 [details]
build.log

build log and emerge --info
Comment 2 Alexey 2024-03-04 01:52:14 UTC 
This is intended. Otherwise we either get this error when running crontab:

ERROR could not change euid to 999: Operation not permitted

Or this file is suid with root, which is much worse.
Comment 3 Agostino Sarubbo gentoo-dev 2024-03-09 14:40:07 UTC 
ci has reproduced this issue with version 3.3.1-r1 - Updating summary.