[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#303270: false permissions of /var/lib/dpkg/info/*.md5sums



Package: dpkg
Version: 1.10.27
Severity: important

if a package does not have a md5sums file, this file gets created in
my debian system, but with false permissions 640 (reportbug, wont work
for non-root users).

# l /var/lib/dpkg/info/gawk.md5sums 
-rw-r--r--  1 root root 6.7K 2005-04-05 18:07 /var/lib/dpkg/info/gawk.md5sums
# dpkg-deb --control /var/cache/apt/archives/gawk_1%3a3.1.4-2_i386.deb 
# l DEBIAN/
total 12K
-rw-r--r--  1 root root 864 2004-11-26 19:32 control
-rwxr-xr-x  1 root root 698 2004-11-26 19:32 postinst
-rwxr-xr-x  1 root root 177 2004-11-26 19:32 prerm

Problem:
/var/lib/dpkg/info/gawk.md5sums should imho be created with
permissions 644 and not 640.

list of also "affected" (beside gawk) packages is in the attachment.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-2-k7
Locale: LANG=en_IE@euro, LC_CTYPE=en_IE@euro (charmap=ISO-8859-15)

Versions of packages dpkg depends on:
ii  dselect                     1.10.27      a user tool to manage Debian packa
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information
-- 
/*The only secure computer is one that's unplugged, locked in a
safe, and buried 20 feet under the ground in a secret location...
and i'm not even too sure about that one.*/
binutils.md5sums
flex.md5sums
gawk.md5sums
bc.md5sums
libpng2.md5sums
base-files.md5sums
dc.md5sums
xvier.md5sums
bzip2.md5sums
cpio.md5sums
liblockfile1.md5sums
rcs.md5sums
libreadline4.md5sums
libreadline4-dev.md5sums
libgsm1.md5sums
pal.md5sums
dpkg.md5sums
make.md5sums
lynx.md5sums
dpkg-dev.md5sums
figlet.md5sums
dselect.md5sums
console-data.md5sums
db4.2-util.md5sums
gnupg.md5sums
syslinux.md5sums
iproute.md5sums
emacsen-common.md5sums
libbz2-1.0.md5sums
libaudio-dev.md5sums
libaudio2.md5sums
modutils.md5sums
libdb4.2.md5sums
libdb4.2-dev.md5sums
lintian.md5sums
sysv-rc.md5sums
wterm.md5sums
xblast-tnt-images.md5sums
xblast-tnt-levels.md5sums
xblast-tnt-models.md5sums
kernel-image-2.6.9-2-k7.md5sums
debmirror.md5sums
rsync.md5sums
maelstrom.md5sums
mime-support.md5sums
module-init-tools.md5sums
xblast-tnt.md5sums

Attachment: signature.asc
Description: Digital signature


Reply to: