Package: modutils
Version: 2.4.27.0-1
Severity: important

The i386 version of this .deb file has a nonsense mode for /usr/share/man
and its subdirs: drw-rw-rw-.

This has two severe consequences:

   1. If modutils happens to be the first package to create the dir, the dir
is no longer accessible to non-root users, breaking at least man, and
probably other important software.

   2. If unpacking the package for non-install tasks (such as integrity
checking) using dpkg-deb -c , the resulting tree is not readable, causing
processing scripts to abort or fail (this happened to me).

This bug was not present in 2.4.26-1.1 (the previous version in sid).

The bug is caused by the following line in debian/rules

chmod -R 644 $(tmpdir)/usr/share/man/

Try changing it to

chmod -R u=rwX,go=rX $(tmpdir)/usr/share/man/
find $(tmpdir)/usr/share/man/ -xdev -noleaf \! -type d \! -type l \
   -perm +0111 -exec /bin/chmod 0644 \{\} \;
# This sequence should result in 755 for dirs and 644 for non-dirs
# Throughout the sequence, user never looses access, go is never granted
#    write access.  It needs to be two commands because no single chmod
#    command line does the right thing.  However the find should be a
#    fast/cached nop unless some of the man pages were originally marked as
#    executable.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10jbj3.2.8
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to