Debian bug report logs - #1682, boring messages

Subject: Bug#1682: serious permissions problems with base discs
Reply-To: Austin Donnelly <and1000@cam.ac.uk>, debian-bugs@pixar.com
Resent-From: Austin Donnelly <and1000@cam.ac.uk>
Orignal-Sender: and1000@thor.cam.ac.uk (Austin Donnelly)
Resent-To: debian-devel@pixar.com
Resent-Date: Mon, 16 Oct 1995 00:48:02 GMT
Resent-Message-ID: <debian-bugs-handler.1682.B10160042060@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: base
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Mon, 16 Oct 1995 00:48:02 GMT
Received: with rfc822 via encapsulated-mail; Mon, 16 Oct 1995 00:42:04 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t4dby-00063aC; Sun, 15 Oct 95 17:41 PDT
Received: from hammer.thor.cam.ac.uk by pixar.com with SMTP id AA28084
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sun, 15 Oct 1995 17:40:38 -0700
Received: by hammer.thor.cam.ac.uk
	(Smail-3.1.29.0 #77) id m0t4dbt-000JfVC; Mon, 16 Oct 95 01:40 BST
Sender: and1000@thor.cam.ac.uk (Austin Donnelly)
Date: Mon, 16 Oct 1995 01:40:57 +0100 (BST)
From: Austin Donnelly <and1000@cam.ac.uk>
X-Sender: and1000@hammer.thor.cam.ac.uk
To: debian-bugs@pixar.com
Message-Id: <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


Package: base
Version: 0.93.6-5

I've just run cops on my system, to find that a few key directories
were world-writable.  Namely:

/usr/sbin
/usr/lib/terminfo
/usr/lib/terminfo/l
/usr/lib/terminfo/c
/usr/lib/zoneinfo
/usr/lib/kbd

Of these, /usr/lib/zoneinfo is still world-writable in the base disc
set.  I don't see how the directories could have changed permissions,
and no, I haven't been throwing bits of my filesystem around.

Austin

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Austin Donnelly <and1000@cam.ac.uk>
Subject: Bug#1682: Acknowledgement (was: serious permissions problems with base discs)
In-Reply-To: <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk>
References: <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk>

Thank you for the problem report you have sent regarding Debian GNU/Linux.
This is an automatically generated reply, to let you know your message has
been received.  It is being forwarded to the developers' mailing list for
their attention; they will reply in due course.

If you wish to submit further information on your problem, please send
it to debian-bugs@pixar.com, but please ensure that the Subject
line of your message starts with "Bug#1682" or "Re: Bug#1682" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)

Subject: Bug#1682: serious permissions problems with base discs
Reply-To: "James A. Robinson" <jimr@simons-rock.edu>, debian-bugs@pixar.com
Resent-From: "James A. Robinson" <jimr@simons-rock.edu>
Resent-To: debian-devel@pixar.com
Resent-Date: Mon, 16 Oct 1995 01:03:02 GMT
Resent-Message-ID: <debian-bugs-handler.1682.B10160100140@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: base
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Mon, 16 Oct 1995 01:03:02 GMT
Received: with rfc822 via encapsulated-mail; Mon, 16 Oct 1995 01:00:12 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t4dtQ-00063aC; Sun, 15 Oct 95 17:59 PDT
Received: from plato.simons-rock.edu by pixar.com with SMTP id AA28478
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sun, 15 Oct 1995 17:58:37 -0700
Received: from simons-rock.edu by plato.simons-rock.edu with smtp
	(Smail3.1.29.1 #1) id m0t4dsM-0003JkC; Sun, 15 Oct 95 20:57 EDT
Message-Id: <m0t4dsM-0003JkC@plato.simons-rock.edu>
To: Austin Donnelly <and1000@cam.ac.uk>
Cc: debian-bugs@Pixar.com
In-Reply-To: Message from Austin Donnelly <and1000@cam.ac.uk>
   of "Mon, 16 Oct 1995 01:40:57 BST." <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk>
Date: Sun, 15 Oct 1995 20:57:56 -0400
From: "James A. Robinson" <jimr@simons-rock.edu>


> /usr/sbin
> /usr/lib/terminfo
> /usr/lib/terminfo/l
> /usr/lib/terminfo/c
> /usr/lib/zoneinfo
> /usr/lib/kbd
>
> Of these, /usr/lib/zoneinfo is still world-writable in the base disc
> set.  I don't see how the directories could have changed permissions,
> and no, I haven't been throwing bits of my filesystem around.

Well, you must have done something different then me, because my new
installation on a box here shows the following perms, with only
zoneinfo having a problem:

drwxr-xr-x   6 root     root         1024 Sep 20 09:36 /usr/lib/kbd
drwxr-xr-x  64 root     root         1024 Sep 22 09:44 /usr/lib/terminfo
drwxr-xr-x   2 root     root         2048 Sep 22 09:43 /usr/lib/terminfo/c
drwxrwxrwx  20 root     root         1024 Sep 20 09:36 /usr/lib/zoneinfo
drwxr-xr-x   2 root     root         3072 Sep 23 10:11 /usr/sbin

The above machine was installed with base disks from 2 weeks ago, and
the packages available then.  Have the base disks been updated since
then?

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: "James A. Robinson" <jimr@simons-rock.edu>
Subject: Bug#1682: Info received (was Bug#1682: serious permissions problems with base discs)
In-Reply-To: <m0t4dsM-0003JkC@plato.simons-rock.edu>
References: <m0t4dsM-0003JkC@plato.simons-rock.edu>

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developers to
accompany the original report.

If you wish to continue to submit further information on your problem,
please do the same thing again: send it to debian-bugs@pixar.com, ensuring
that the Subject line starts with "Bug#1682" or "Re: Bug#1682" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)

Subject: Bug#1682: Re: permissions on directories
Reply-To: ian@chiark.chu.cam.ac.uk (Ian Jackson), debian-bugs@pixar.com
Resent-From: ian@chiark.chu.cam.ac.uk (Ian Jackson)
Resent-To: debian-devel@pixar.com
Resent-Date: Sat, 21 Oct 1995 17:33:02 GMT
Resent-Message-ID: <debian-bugs-handler.1682.B10211725210@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: base
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Sat, 21 Oct 1995 17:33:02 GMT
Received: with rfc822 via encapsulated-mail; Sat, 21 Oct 1995 17:25:19 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t6hcU-000B3lC; Sat, 21 Oct 95 10:22 PDT
Received: from artemis.chu.cam.ac.uk by pixar.com with SMTP id AA19729
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sat, 21 Oct 1995 10:13:35 -0700
Received: from chiark.chu.cam.ac.uk by artemis.chu.cam.ac.uk with smtp
	(Smail3.1.29.1 #33) id m0t6hUV-0007uOC; Sat, 21 Oct 95 18:13 BST
Received: by chiark.chu.cam.ac.uk
	id m0t6hUJ-0002b6C
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Sat, 21 Oct 95 18:13 BST
Message-Id: <m0t6hUJ-0002b6C@chiark.chu.cam.ac.uk>
Date: Sat, 21 Oct 95 18:13 BST
From: ian@chiark.chu.cam.ac.uk (Ian Jackson)
To: and1000@cam.ac.uk (Austin Donnelly)
Cc: Debian bugs submission address <debian-bugs@pixar.com>
In-Reply-To: <m0t6hQT-000z5NC@valour.pem.cam.ac.uk>
References: <m0t6hQT-000z5NC@valour.pem.cam.ac.uk>

Austin Donnelly writes ("permissions on directories"):
> Remember the fiasco with /usr/sbin being world writeable?
>
> Well, I tracked it down: I had a look at the base discs I installed, and
> what do I find:
>   /usr/lib/kbd
>   /usr/lib/terminfo
>   /usr/lib/terminfo/c
>   /usr/lib/terminfo/l
>   /usr/lib/zoneinfo
>   /usr/doc
>   /usr/sbin
> are all world writeable.
>
> So it wasn't me playing silly buggers - it was the 3 base discs!
>
> Austin (feeling righteous:)

Don't tell me, tell debian-bugs :-).  I've added the number of your
original bug report to the Subject and CC'd this message there.

Bruce: I trust that the latest disks don't have this problem.  Do we
know how this happened ?

Ian.

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: ian@chiark.chu.cam.ac.uk (Ian Jackson)
Subject: Bug#1682: Info received (was Bug#1682: Re: permissions on directories)
In-Reply-To: <m0t6hUJ-0002b6C@chiark.chu.cam.ac.uk>
References: <m0t6hUJ-0002b6C@chiark.chu.cam.ac.uk>

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developers to
accompany the original report.

If you wish to continue to submit further information on your problem,
please do the same thing again: send it to debian-bugs@pixar.com, ensuring
that the Subject line starts with "Bug#1682" or "Re: Bug#1682" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)