Bug 13296 - Weak permissions on files
Summary: Weak permissions on files
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: jabber-jit (show other bugs)
Version: unstable
Hardware: all Linux
: P2 normal
Assignee: Nikolay A. Fetisov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-11-02 07:24 MSK by Nikolay A. Fetisov
Modified: 2008-12-14 23:09 MSK (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Nikolay A. Fetisov 2007-11-02 07:24:07 MSK 
В пакете заданы права:
%attr(0640,%username,%username) %_sysconfdir/%name/%name.xml
%dir %attr(0700,%username,%username) %_spooldir/%name

Это нарушает ALT Secure Packaging Policy:
http://docs.altlinux.ru/alt/devel/ch01s03.html#id2884290

Должно быть:
%attr(0640,root,%username) %_sysconfdir/%name/%name.xml
%dir %attr(1770,root,%username) %_spooldir/%name
Comment 1 Nikolay A. Fetisov 2008-12-14 23:08:53 MSK 
Исправлено в 1.2.0-alt1