Bug#171946: marked as done (tetex-base: a+w dirs in /usr)
Your message dated 06 Dec 2002 10:42:55 -0500
with message-id <1039189375.25885.99.camel@bohr>
and subject line Bug#171946: tetex-base: a+w dirs in /usr
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 6 Dec 2002 06:39:27 +0000
>From anthony@derobert.net Fri Dec 06 00:39:27 2002
Return-path: <anthony@derobert.net>
Received: from ip68-100-128-98.nv.nv.cox.net (mx02.derobert.net) [68.100.128.98]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 18KC90-0004BQ-00; Fri, 06 Dec 2002 00:39:26 -0600
Received: from bohr.local ([192.168.65.5])
by mx02.derobert.net with esmtp (Exim 3.22 #1 (Red Hat Linux))
id 18KC8z-0004hy-00; Fri, 06 Dec 2002 01:39:25 -0500
Received: from anthony by bohr.local with local (Exim 3.36 #1 (Debian))
id 18KC8w-00025y-00; Fri, 06 Dec 2002 01:39:25 -0500
From: Anthony DeRobertis <asd@suespammers.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: tetex-base: a+w dirs in /usr
X-Mailer: reportbug 1.50
Date: Fri, 06 Dec 2002 01:39:22 -0500
Message-Id: <[🔎] E18KC8w-00025y-00@bohr.local>
Sender: Anthony DeRobertis <anthony@bohr.local>
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=0.1 required=5.0
tests=PGP_SIGNATURE,SPAM_PHRASE_00_01
version=2.41
X-Spam-Level:
Package: tetex-base
Version: 1.0.2+20011202-3
Severity: serious
File: /usr/share/texmf/fonts
Tags: security
Justification: Policy 10.1.1; FHS 4; Policy 11.9
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
/usr is for static data. Arbitrary users should not be allowed to place
files there. Allowing it has problems like defeating quotas (who puts
quotas on /usr?). Also, there may be good TeX reasons for not allowing
arbitrary additions to those directories.
Here is a list of directories in /usr that are writable by users on my system.
All come from tetex or tetex related packages:
$ find /usr -type d -perm +o+w
/usr/share/texmf/fonts
/usr/share/texmf/fonts/source/jknappen
/usr/share/texmf/fonts/source/jknappen/sauter
/usr/share/texmf/fonts/source/jknappen/tc
/usr/share/texmf/fonts/source/jknappen/ec
/usr/share/texmf/fonts/source/public/cs
/usr/share/texmf/fonts/source/lh
/usr/share/texmf/fonts/source/lh/specific
/usr/share/texmf/fonts/source/lh/base
/usr/share/texmf/fonts/source/lh/lh-lcy
/usr/share/texmf/fonts/source/lh/lh-ot2
/usr/share/texmf/fonts/source/lh/lh-t2a
/usr/share/texmf/fonts/source/lh/lh-t2b
/usr/share/texmf/fonts/source/lh/lh-t2c
/usr/share/texmf/fonts/source/lh/lh-x2
/usr/share/texmf/fonts/source/lh/nont2
/usr/share/texmf/fonts/source/lh/lh-t2d
/usr/share/texmf/fonts/tfm
/usr/share/texmf/fonts/tfm/public
/usr/share/texmf/fonts/tfm/public/latex
/usr/share/texmf/fonts/tfm/public/cm
/usr/share/texmf/fonts/tfm/public/concrete
/usr/share/texmf/fonts/tfm/public/misc
/usr/share/texmf/fonts/tfm/public/mflogo
/usr/share/texmf/fonts/tfm/public/rsfs
/usr/share/texmf/fonts/tfm/public/gothic
/usr/share/texmf/fonts/tfm/public/pandora
/usr/share/texmf/fonts/tfm/public/wasy
/usr/share/texmf/fonts/tfm/public/mathpple
/usr/share/texmf/fonts/tfm/public/cmextra
/usr/share/texmf/fonts/tfm/public/bbold
/usr/share/texmf/fonts/tfm/public/bbm
/usr/share/texmf/fonts/tfm/public/xypic
/usr/share/texmf/fonts/tfm/public/concmath
/usr/share/texmf/fonts/tfm/public/euxm
/usr/share/texmf/fonts/tfm/public/marvosym
/usr/share/texmf/fonts/tfm/public/omega
/usr/share/texmf/fonts/tfm/public/ae
/usr/share/texmf/fonts/tfm/public/stmaryrd
/usr/share/texmf/fonts/tfm/public/cmcyr
/usr/share/texmf/fonts/tfm/public/cc-pl
/usr/share/texmf/fonts/tfm/public/pl
/usr/share/texmf/fonts/tfm/public/cs
/usr/share/texmf/fonts/tfm/public/ecc
/usr/share/texmf/fonts/tfm/public/vcm
/usr/share/texmf/fonts/tfm/public/vnr
/usr/share/texmf/fonts/tfm/public/antp
/usr/share/texmf/fonts/tfm/public/antt
/usr/share/texmf/fonts/tfm/public/pazo
/usr/share/texmf/fonts/tfm/public/qfonts
/usr/share/texmf/fonts/tfm/yandy
/usr/share/texmf/fonts/tfm/yandy/mathtime
/usr/share/texmf/fonts/tfm/yandy/mathplus
/usr/share/texmf/fonts/tfm/yandy/symbol
/usr/share/texmf/fonts/tfm/yandy/times
/usr/share/texmf/fonts/tfm/yandy/courier
/usr/share/texmf/fonts/tfm/yandy/mathpi
/usr/share/texmf/fonts/tfm/yandy/zapfding
/usr/share/texmf/fonts/tfm/yandy/lubright
/usr/share/texmf/fonts/tfm/yandy/lucida
/usr/share/texmf/fonts/tfm/yandy/lucidfax
/usr/share/texmf/fonts/tfm/yandy/lucsans
/usr/share/texmf/fonts/tfm/yandy/lumath
/usr/share/texmf/fonts/tfm/ams
/usr/share/texmf/fonts/tfm/ams/cyrillic
/usr/share/texmf/fonts/tfm/ams/euler
/usr/share/texmf/fonts/tfm/ams/symbols
/usr/share/texmf/fonts/tfm/ams/cmextra
/usr/share/texmf/fonts/tfm/hoekwater
/usr/share/texmf/fonts/tfm/hoekwater/context
/usr/share/texmf/fonts/tfm/bh
/usr/share/texmf/fonts/tfm/bh/helvetic
/usr/share/texmf/fonts/tfm/bh/lubright
/usr/share/texmf/fonts/tfm/bh/lucida
/usr/share/texmf/fonts/tfm/bh/lucidfax
/usr/share/texmf/fonts/tfm/bh/lucsans
/usr/share/texmf/fonts/tfm/bh/lumath
/usr/share/texmf/fonts/tfm/bh/wingding
/usr/share/texmf/fonts/tfm/cg
/usr/share/texmf/fonts/tfm/cg/albertus
/usr/share/texmf/fonts/tfm/cg/atqolive
/usr/share/texmf/fonts/tfm/cg/clarendo
/usr/share/texmf/fonts/tfm/cg/coronet
/usr/share/texmf/fonts/tfm/cg/courier
/usr/share/texmf/fonts/tfm/cg/garamond
/usr/share/texmf/fonts/tfm/cg/lettrgth
/usr/share/texmf/fonts/tfm/cg/marigold
/usr/share/texmf/fonts/tfm/cg/optima
/usr/share/texmf/fonts/tfm/cg/times
/usr/share/texmf/fonts/tfm/cg/univers
/usr/share/texmf/fonts/tfm/monotype
/usr/share/texmf/fonts/tfm/monotype/helvetic
/usr/share/texmf/fonts/tfm/monotype/symbol
/usr/share/texmf/fonts/tfm/monotype/timesnew
/usr/share/texmf/fonts/tfm/jp
/usr/share/texmf/fonts/tfm/pxr
/usr/share/texmf/fonts/tfm/jknappen
/usr/share/texmf/fonts/tfm/jknappen/ec
/usr/share/texmf/fonts/tfm/jknappen/tc
/usr/share/texmf/fonts/tfm/txr
- -- System Information
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux bohr 2.4.16 #2 SMP Wed Nov 28 05:25:00 EST 2001 i686
Locale: LANG=en_US, LC_CTYPE=en_US
Versions of packages tetex-base depends on:
ii dpkg 1.10.4 Package maintenance system for Deb
ii texinfo 4.2-1 Documentation system for on-line i
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
iD8DBQE98EYc+z+IwlXqWf4RAnDHAJwJLMantfO6wB51TvegwIas0jkMfgCeMH5/
xvVh0itb5Q0CWYWyTourzfU=
=Wnbj
-----END PGP SIGNATURE-----
---------------------------------------
Received: (at 171946-done) by bugs.debian.org; 6 Dec 2002 15:42:57 +0000
>From asd@suespammers.org Fri Dec 06 09:42:56 2002
Return-path: <asd@suespammers.org>
Received: from ip68-100-128-98.nv.nv.cox.net (mx02.derobert.net) [68.100.128.98]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 18KKcy-0007Cx-00; Fri, 06 Dec 2002 09:42:56 -0600
Received: from bohr.local ([192.168.65.5] helo=localhost.localdomain)
by mx02.derobert.net with esmtp (Exim 3.22 #1 (Red Hat Linux))
id 18KKcx-0005kj-00
for <171946-done@bugs.debian.org>; Fri, 06 Dec 2002 10:42:55 -0500
Subject: Re: Bug#171946: tetex-base: a+w dirs in /usr
From: Anthony DeRobertis <asd@suespammers.org>
To: 171946-done@bugs.debian.org
In-Reply-To: <[🔎] 20021206.173432.74727349.kohda@pm.tokushima-u.ac.jp>
References: <[🔎] E18KC8w-00025y-00@bohr.local>
<[🔎] 20021206.173432.74727349.kohda@pm.tokushima-u.ac.jp>
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature";
boundary="=-Kg6omO04YxM/vvm07gNl"
X-Mailer: Ximian Evolution 1.0.5
Date: 06 Dec 2002 10:42:55 -0500
Message-Id: <1039189375.25885.99.camel@bohr>
Mime-Version: 1.0
Delivered-To: 171946-done@bugs.debian.org
X-Spam-Status: No, hits=-7.3 required=5.0
tests=EMAIL_ATTRIBUTION,IN_REP_TO,PGP_SIGNATURE_2,REFERENCES,
SPAM_PHRASE_00_01
version=2.41
X-Spam-Level:
--=-Kg6omO04YxM/vvm07gNl
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Fri, 2002-12-06 at 03:34, Atsuhito Kohda wrote:
> It certainly your problem and I will close this soon.
Hmmm, I certainly haven't done it by hand... After much research in a
woody chroot, it appears there is an option in texconfig that does this:
Font -> FontRW
What's that for?
Other than that, I couldn't get it to happen in my stable chroot. And
upgrading that to testing failed due to tetex-base; expect a new bug on
that ;-)
I don't think I did it myself, but maybe. I'll close the bug.
--=-Kg6omO04YxM/vvm07gNl
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
iD8DBQA98MV/+z+IwlXqWf4RAoweAJ9qlW9AMFpzrZRdaA7ER+vcuxyCsgCfZSxt
nIvnWdUih+rjBiYM59o2Gg0=
=vzkK
-----END PGP SIGNATURE-----
--=-Kg6omO04YxM/vvm07gNl--
Reply to: