Debian bug report logs - #1682
serious permissions problems with base discs

Message received at debian-bugs:

From chiark.chu.cam.ac.uk!ijackson Sat Oct 21 10:22:07 1995
Return-Path: <ijackson@chiark.chu.cam.ac.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t6hcU-000B3lC; Sat, 21 Oct 95 10:22 PDT
Received: from artemis.chu.cam.ac.uk by pixar.com with SMTP id AA19729
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sat, 21 Oct 1995 10:13:35 -0700
Received: from chiark.chu.cam.ac.uk by artemis.chu.cam.ac.uk with smtp
	(Smail3.1.29.1 #33) id m0t6hUV-0007uOC; Sat, 21 Oct 95 18:13 BST
Received: by chiark.chu.cam.ac.uk
	id m0t6hUJ-0002b6C
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Sat, 21 Oct 95 18:13 BST
Message-Id: <m0t6hUJ-0002b6C@chiark.chu.cam.ac.uk>
Date: Sat, 21 Oct 95 18:13 BST
From: ian@chiark.chu.cam.ac.uk (Ian Jackson)
To: and1000@cam.ac.uk (Austin Donnelly)
Cc: Debian bugs submission address <debian-bugs@pixar.com>
Subject: Bug#1682: Re: permissions on directories
In-Reply-To: <m0t6hQT-000z5NC@valour.pem.cam.ac.uk>
References: <m0t6hQT-000z5NC@valour.pem.cam.ac.uk>

Austin Donnelly writes ("permissions on directories"):
> Remember the fiasco with /usr/sbin being world writeable?
> 
> Well, I tracked it down: I had a look at the base discs I installed, and
> what do I find:
>   /usr/lib/kbd
>   /usr/lib/terminfo
>   /usr/lib/terminfo/c
>   /usr/lib/terminfo/l
>   /usr/lib/zoneinfo
>   /usr/doc
>   /usr/sbin
> are all world writeable.
> 
> So it wasn't me playing silly buggers - it was the 3 base discs!
> 
> Austin (feeling righteous:)

Don't tell me, tell debian-bugs :-).  I've added the number of your
original bug report to the Subject and CC'd this message there.

Bruce: I trust that the latest disks don't have this problem.  Do we
know how this happened ?

Ian.

Message received at debian-bugs:

From simons-rock.edu!jimr Sun Oct 15 17:59:05 1995
Return-Path: <jimr@simons-rock.edu>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t4dtQ-00063aC; Sun, 15 Oct 95 17:59 PDT
Received: from plato.simons-rock.edu by pixar.com with SMTP id AA28478
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sun, 15 Oct 1995 17:58:37 -0700
Received: from simons-rock.edu by plato.simons-rock.edu with smtp
	(Smail3.1.29.1 #1) id m0t4dsM-0003JkC; Sun, 15 Oct 95 20:57 EDT
Message-Id: <m0t4dsM-0003JkC@plato.simons-rock.edu>
To: Austin Donnelly <and1000@cam.ac.uk>
Cc: debian-bugs@Pixar.com
Subject: Re: Bug#1682: serious permissions problems with base discs 
In-Reply-To: Message from Austin Donnelly <and1000@cam.ac.uk> 
   of "Mon, 16 Oct 1995 01:40:57 BST." <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk> 
Date: Sun, 15 Oct 1995 20:57:56 -0400
From: "James A. Robinson" <jimr@simons-rock.edu>


> /usr/sbin
> /usr/lib/terminfo
> /usr/lib/terminfo/l
> /usr/lib/terminfo/c
> /usr/lib/zoneinfo
> /usr/lib/kbd		
> 
> Of these, /usr/lib/zoneinfo is still world-writable in the base disc
> set.  I don't see how the directories could have changed permissions,
> and no, I haven't been throwing bits of my filesystem around.

Well, you must have done something different then me, because my new
installation on a box here shows the following perms, with only
zoneinfo having a problem:

drwxr-xr-x   6 root     root         1024 Sep 20 09:36 /usr/lib/kbd
drwxr-xr-x  64 root     root         1024 Sep 22 09:44 /usr/lib/terminfo
drwxr-xr-x   2 root     root         2048 Sep 22 09:43 /usr/lib/terminfo/c
drwxrwxrwx  20 root     root         1024 Sep 20 09:36 /usr/lib/zoneinfo
drwxr-xr-x   2 root     root         3072 Sep 23 10:11 /usr/sbin

The above machine was installed with base disks from 2 weeks ago, and
the packages available then.  Have the base disks been updated since
then? 

Message received at debian-bugs:

From thor.cam.ac.uk!and1000 Sun Oct 15 17:41:02 1995
Return-Path: <and1000@thor.cam.ac.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t4dby-00063aC; Sun, 15 Oct 95 17:41 PDT
Received: from hammer.thor.cam.ac.uk by pixar.com with SMTP id AA28084
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sun, 15 Oct 1995 17:40:38 -0700
Received: by hammer.thor.cam.ac.uk 
	(Smail-3.1.29.0 #77) id m0t4dbt-000JfVC; Mon, 16 Oct 95 01:40 BST
Sender: and1000@thor.cam.ac.uk (Austin Donnelly)
Date: Mon, 16 Oct 1995 01:40:57 +0100 (BST)
From: Austin Donnelly <and1000@cam.ac.uk>
X-Sender: and1000@hammer.thor.cam.ac.uk
To: debian-bugs@pixar.com
Subject: serious permissions problems with base discs
Message-Id: <Pine.SOL.3.91.951016013521.10069A-100000@hammer.thor.cam.ac.uk>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


Package: base
Version: 0.93.6-5

I've just run cops on my system, to find that a few key directories
were world-writable.  Namely:

/usr/sbin
/usr/lib/terminfo
/usr/lib/terminfo/l
/usr/lib/terminfo/c
/usr/lib/zoneinfo
/usr/lib/kbd

Of these, /usr/lib/zoneinfo is still world-writable in the base disc
set.  I don't see how the directories could have changed permissions,
and no, I haven't been throwing bits of my filesystem around.

Austin