[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#340981: debian-installer and world writable directories



Mikko Rapeli wrote:
> So all files after install belong to some package post Sarge? I was just 
> wondering about this by my self.

Yes, the installation-report package owns the logs post sarge. In sarge,
purging base-config will remove the logs, but users may not want to do
that.

> "Installer may leave /var/log/debian-installer/cdebconf directory 
> writable to all users. On debian-installer architectures which use an 
> ext2 formatted inital ramdisk created with genext2fs (alpha, amd64, arm, 
> hppa, i386, mipsel, mk68k and s390 and depending on install medium 
> and/or method also ia64 and sparc, mips and powerpc are unaffected) this 
> directory remains writable (drwxrwxrwx) by all users. This can be fixed 
> by changing the directory permissions as root after installation:
> 
> # chmod go-w /var/log/debian-installer/cdebconf"
> 
> Or something similar. Feel free to use/modify/discard that text :)

Added to errata.

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


Reply to: