Your message dated Sun, 13 Feb 2005 09:17:29 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#292081: fixed in kdelibs 4:3.3.2-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 25 Jan 2005 00:38:05 +0000
>From [EMAIL PROTECTED] Mon Jan 24 16:38:05 2005
Return-path: <[EMAIL PROTECTED]>
Received: from tornado.dat.etsit.upm.es (dat.etsit.upm.es) [138.100.17.73]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1CtEg5-0005wA-00; Mon, 24 Jan 2005 16:35:29 -0800
Received: (qmail 21875 invoked by uid 1013); 25 Jan 2005 00:35:26 -0000
Date: Tue, 25 Jan 2005 01:35:26 +0100
From: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: kdelibs: Proper manpage for lnusertemp
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="z6Eq5LdranGa6ru8"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--z6Eq5LdranGa6ru8
Content-Type: multipart/mixed; boundary="9amGYk9869ThD9tj"
Content-Disposition: inline
--9amGYk9869ThD9tj
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package: kdelibs
Version: 4:3.3.2-1
Priority: wishlist
Tags: patch=20
While reviewing temporary symlink issues in KDE (as part of the Debian
Security Audit work) I've found no documentation about the 'lnusertemp'
which is used by KDE so I had to dig into the sources and wrote one. I
would appreciate if you could review the attached manpage, proof read it,
and include it in the package for the benefit of other users.
Thanks
Javier
--9amGYk9869ThD9tj
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="lnusertemp.sgml"
Content-Transfer-Encoding: quoted-printable
<!doctype refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN" [
<!-- Process this file with docbook-to-man to generate an nroff manual
page: `docbook-to-man manpage.sgml > manpage.1'. You may view
the manual page with: `docbook-to-man manpage.sgml | nroff -man |
less'. A typical entry in a Makefile or Makefile.am is:
manpage.1: manpage.sgml
docbook-to-man $< > $@
=20
The docbook-to-man binary is found in the docbook-to-man package.
Please remember that if you create the nroff version in one of the
debian/rules file targets (such as build), you will need to include
docbook-to-man in your Build-Depends control field.
-->
<!-- Fill in your name for FIRSTNAME and SURNAME. -->
<!ENTITY dhfirstname "<firstname>Javier</firstname>">
<!ENTITY dhsurname "<surname>Fernandez-Sanguino</surname>">
<!-- Please adjust the date whenever revising the manpage. -->
<!ENTITY dhdate "<date>25 January, 2005</date>">
<!ENTITY dhsection "<manvolnum>1</manvolnum>">
<!ENTITY dhemail "<email>[EMAIL PROTECTED]</email>">
<!ENTITY dhusername "Javier Fernandez-Sanguino">
<!ENTITY dhucpackage "<refentrytitle>LNUSERTEMP</refentrytitle>">
<!ENTITY dhpackage "lnusertemp">
<!ENTITY debian "<productname>Debian</productname>">
<!ENTITY gnu "<acronym>GNU</acronym>">
]>
<refentry>
<refentryinfo>
<address>
&dhemail;
</address>
<author>
&dhfirstname;
&dhsurname;
</author>
<copyright>
<year>2005</year>
<holder>&dhusername;</holder>
</copyright>
&dhdate;
</refentryinfo>
<refmeta>
&dhucpackage;
&dhsection;
</refmeta>
<refnamediv>
<refname>&dhpackage;</refname>
<refpurpose>tool to create KDE resources and symlinks to them</refpurpo=
se>
</refnamediv>
<refsynopsisdiv>
<cmdsynopsis>
<command>&dhpackage;</command>
<arg><option><replaceable>tmp|socket|cache</replaceable></option></ar=
g>
</cmdsynopsis>
</refsynopsisdiv>
<refsect1>
<title>DESCRIPTION</title>
<para>This manual page documents briefly the
<command>&dhpackage;</command> command.</para>
<para><command>&dhpackage;</command> is used to create KDE
resources in temporary directories and symlinks to them in
<envar>KDEHOME</envar>. The resource that needs to be created is
given as an argument and can be anyone of:</para>
<itemizedlist>
<listitem><para><emphasis>tmp</emphasis>: for the directory used
for storing temporary files. This directory should be preferably
on a local filesystem (available in KDE 2.x)</para> </listitem>
<listitem><para><emphasis>socket</emphasis>: for the directory
that holds temporary sockets. This directory needs to be on the
local filesystem (available in KDE 2.x)</para> </listitem>
<listitem><para><emphasis>cache</emphasis>: for the directory that
stores cached information such as the HTTP cache and favicons
(available since KDE 3.0)</para> </listitem>
</itemizedlist>
<para><command>&dhpackage;</command> will create the first two
resources in directories under <filename>/tmp</filename> (or
<envar>KDETMP</envar> if defined in the environment) and will use
<filename>/var/tmp</filename> (or <envar>KDEVARTMP</envar> if
defined in the environment) for the <emphasis>cache</emphasis>
resource (in order to survive system reboots). The temporary
directories created for resources are usually of the form
<filename>RESOURCE-USERNAME</filename>. The name might vary if
those filenames already exist and do not belong to the user for
which <command>&dhpackage;</command> is run, a temporary (unique)
name will be used if possible to prevent temporary symlink
attacks. </para>
<para><command>&dhpackage;</command> is usually called by the
<command>startkde</command> script.</para>
</refsect1>
<refsect1>
<title>EXIT VALUES</title>
<para><command>&dhpackage;</command> will return 0 if it can
create the resource and symlink to it, or if the resource already
exists and is properly symlinked it will return 1 if it cannot
create the link or if the symlink is pointing to an incorrect
location.</para>
</refsect1>
<refsect1>
<title>SEE ALSO</title>
<para>You can find more information on the KDE's usage of
temporary files in the Chapter <ulink
url=3D"http://i18n.kde.org/doc/admin/temp-files.html";><citetitle>Tempor=
ary
and Other Files KDE Uses</citetitle></ulink> of the <ulink
url=3D"http://i18n.kde.org/doc/admin/";><citetitle>The KDE
Administrators Guide</citetitle></ulink>. </para>
</refsect1>
<refsect1>
<title>AUTHOR</title>
<para>This manual page was written by &dhusername;
<&dhemail;> for the &debian; system (but may be used by
others). Permission is granted to copy, distribute and/or
modify this document under the terms of the &gnu; General Public
License, Version 2 any later version published by the Free
Software Foundation. </para>
<para>
On Debian systems, the complete text of the GNU General
Public License can be found in
/usr/share/common-licenses/GPL.=20
</para>
</refsect1>
</refentry>
<!-- Keep this comment at the end of the file
Local variables:
mode: sgml
sgml-omittag:t
sgml-shorttag:t
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-indent-step:2
sgml-indent-data:t
sgml-parent-document:nil
sgml-default-dtd-file:nil
sgml-exposed-tags:nil
sgml-local-catalogs:nil
sgml-local-ecat-files:nil
End:
-->
--9amGYk9869ThD9tj--
--z6Eq5LdranGa6ru8
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFB9ZROi4sehJTrj0oRAocOAJ95+K23rIyMDIQKIKufKUpD0o6WOwCghSBJ
AjPPhKN0p0N9ij7o/UM/fow=
=cCPZ
-----END PGP SIGNATURE-----
--z6Eq5LdranGa6ru8--
---------------------------------------
Received: (at 292081-close) by bugs.debian.org; 13 Feb 2005 14:23:04 +0000
>From [EMAIL PROTECTED] Sun Feb 13 06:23:04 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D0KeO-0004B0-00; Sun, 13 Feb 2005 06:23:04 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D0KYz-0008R6-00; Sun, 13 Feb 2005 09:17:29 -0500
From: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#292081: fixed in kdelibs 4:3.3.2-2
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sun, 13 Feb 2005 09:17:29 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 3
Source: kdelibs
Source-Version: 4:3.3.2-2
We believe that the bug you reported is fixed in the latest version of
kdelibs, which is due to be installed in the Debian FTP archive:
kdelibs-bin_3.3.2-2_i386.deb
to pool/main/k/kdelibs/kdelibs-bin_3.3.2-2_i386.deb
kdelibs-data_3.3.2-2_all.deb
to pool/main/k/kdelibs/kdelibs-data_3.3.2-2_all.deb
kdelibs4-dev_3.3.2-2_i386.deb
to pool/main/k/kdelibs/kdelibs4-dev_3.3.2-2_i386.deb
kdelibs4-doc_3.3.2-2_all.deb
to pool/main/k/kdelibs/kdelibs4-doc_3.3.2-2_all.deb
kdelibs4_3.3.2-2_i386.deb
to pool/main/k/kdelibs/kdelibs4_3.3.2-2_i386.deb
kdelibs_3.3.2-2.diff.gz
to pool/main/k/kdelibs/kdelibs_3.3.2-2.diff.gz
kdelibs_3.3.2-2.dsc
to pool/main/k/kdelibs/kdelibs_3.3.2-2.dsc
kdelibs_3.3.2-2_all.deb
to pool/main/k/kdelibs/kdelibs_3.3.2-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> (supplier of updated
kdelibs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 13 Feb 2005 04:58:29 +0100
Source: kdelibs
Binary: kdelibs4 kdelibs-bin kdelibs kdelibs4-doc kdelibs-data kdelibs4-dev
Architecture: source i386 all
Version: 4:3.3.2-2
Distribution: unstable
Urgency: high
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Description:
kdelibs - KDE core libraries metapackage
kdelibs-bin - KDE core binaries
kdelibs-data - KDE core shared data
kdelibs4 - KDE core libraries
kdelibs4-dev - KDE core libraries (development files)
kdelibs4-doc - KDE core library documentation
Closes: 270592 290323 292081 292569 292765 294832 294896
Changes:
kdelibs (4:3.3.2-2) unstable; urgency=high
.
+++ Changes by Adeodato Simó:
.
* Include patch to fix CAN-2005-0365, "insecure temporary file creation in
kdelibs 3.3.2". dcopidlng no longer creates its temporary files in /tmp.
(Closes: #294832, #294896) Urgency set to high because of this and other
RC bug fixes below.
.
* KDE_3_3_BRANCH update.
.
* Include patch from CVS to fix XMLHttpRequest POST being broken in KHTML
due to a blank line in headers. (Closes: #292765)
.
+++ Changes by Christopher Martin:
.
* Add patch from upstream that solves the problem wherein programs whose
.desktop entry contained their full path, rather than just the binary
to be executed (mainly games), confused kdeinit.
(Closes: #270592, #290323)
.
* debian/control: Add necessary kdelibs-data Replaces for old
openoffice.org packages. (Closes: #292569)
.
* Add better manpage for lnusertemp. Thanks to Javier Fernández-Sanguino
Peña. (Closes: #292081)
Files:
97bcad06bc3f35a5966d652f31c304ee 1302 libs optional kdelibs_3.3.2-2.dsc
e8fc19fa7b6e05679c0a1685ee7c7ddd 441095 libs optional kdelibs_3.3.2-2.diff.gz
fe0f7edea20e8c0dcdc77a499f1b36bb 854500 libs optional
kdelibs-bin_3.3.2-2_i386.deb
e48add20db2debc3583847ae41eac3e7 8186534 libs optional
kdelibs4_3.3.2-2_i386.deb
80de26e8a8916a6db994488d55341377 1231148 libdevel optional
kdelibs4-dev_3.3.2-2_i386.deb
5ed446dccab56f5f72bce0dbd106a551 18624 kde optional kdelibs_3.3.2-2_all.deb
f1dc691989bb771e344508defeb364b3 7083852 libs optional
kdelibs-data_3.3.2-2_all.deb
3ea3e09f919dd12325316ea72b7b4372 11570094 doc optional
kdelibs4-doc_3.3.2-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Signed by Isaac Clerencia <[EMAIL PROTECTED]>
iD8DBQFCD09IQET2GFTmct4RAujUAJ4jDMiVlyGQfPQDRTI1wI9Wiwox2QCePjH7
zeAG5hDal7zM91Z45OA0sgc=
=6tRo
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
