Re: Bug#23576: tetex-base: no write-permissions on public font directories

[Olaf Weber <olaf@infovore.xs4all.nl>]

Christoph Martin writes:

> A normal user could replace the file with a link to some other file
> say /vmlinuz or a file in another user homedir. Then if root or this
> other user  tries to write ls-R he/she would write to /vmlinuz or
> other files.

mktexupd checks for a magic string, and won't change ls-R files where
this is lacking.  A similar check can be added to mktexlsr, just in
case.

> BTW it is Debian policy to not have word-writable files.

Noted.

-- 
Olaf Weber


--  
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org