[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#303270: marked as done (false permissions of /var/lib/dpkg/info/*.md5sums)



Your message dated Tue, 05 Apr 2005 19:30:57 +0100
with message-id <1112725857.8570.20.camel@descent.netsplit.com>
and subject line Bug#303270: false permissions of /var/lib/dpkg/info/*.md5sums
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 5 Apr 2005 17:46:11 +0000
>From michael.geb@gmx.at Tue Apr 05 10:46:11 2005
Return-path: <michael.geb@gmx.at>
Received: from www.vc-graz.ac.at (proxy.vc-graz.ac.at) [193.171.121.30] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DIs7u-0002ei-00; Tue, 05 Apr 2005 10:46:11 -0700
Received: from god (m-77.vc-graz.ac.at [193.170.224.77])
	(authenticated bits=0)
	by proxy.vc-graz.ac.at (8.13.1/8.13.1) with ESMTP id j35Hk94r027182
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Tue, 5 Apr 2005 19:46:09 +0200 (MEST)
Received: by god (Postfix, from userid 1000)
	id 715611C21F; Tue,  5 Apr 2005 19:46:08 +0200 (CEST)
Date: Tue, 5 Apr 2005 19:46:08 +0200
From: Michael Gebetsroither <michael.geb@gmx.at>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: false permissions of /var/lib/dpkg/info/*.md5sums
Message-ID: <[🔎] 20050405174608.GA15224@god>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="dc+cDN39EJAMEtIO"
Content-Disposition: inline
X-Reportbug-Version: 3.9
X-URL: http://einsteinmg.dyndns.org
X-Operating-System: Debian/GNU SID
X-Registered-Linux-User: 278278
X-Crypto: GnuPG/1.2.5 http://www.gnupg.org
X-GPG-Key-ID: 0x74BE9EBE
X-GPG-Fingerprint: DC1D 6F9B 06BE FC94 56E5  2F6A F142 230E 74BE 9EBE
User-Agent: Mutt/1.5.8i
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--dc+cDN39EJAMEtIO
Content-Type: multipart/mixed; boundary="n8g4imXOkfNTN/H1"
Content-Disposition: inline


--n8g4imXOkfNTN/H1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: dpkg
Version: 1.10.27
Severity: important

if a package does not have a md5sums file, this file gets created in
my debian system, but with false permissions 640 (reportbug, wont work
for non-root users).

# l /var/lib/dpkg/info/gawk.md5sums=20
-rw-r--r--  1 root root 6.7K 2005-04-05 18:07 /var/lib/dpkg/info/gawk.md5su=
ms
# dpkg-deb --control /var/cache/apt/archives/gawk_1%3a3.1.4-2_i386.deb=20
# l DEBIAN/
total 12K
-rw-r--r--  1 root root 864 2004-11-26 19:32 control
-rwxr-xr-x  1 root root 698 2004-11-26 19:32 postinst
-rwxr-xr-x  1 root root 177 2004-11-26 19:32 prerm

Problem:
/var/lib/dpkg/info/gawk.md5sums should imho be created with
permissions 644 and not 640.

list of also "affected" (beside gawk) packages is in the attachment.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-2-k7
Locale: LANG=3Den_IE@euro, LC_CTYPE=3Den_IE@euro (charmap=3DISO-8859-15)

Versions of packages dpkg depends on:
ii  dselect                     1.10.27      a user tool to manage Debian p=
acka
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared librarie=
s an

-- no debconf information
--=20
/*The only secure computer is one that's unplugged, locked in a
safe, and buried 20 feet under the ground in a secret location...
and i'm not even too sure about that one.*/

--n8g4imXOkfNTN/H1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=apt-problem

binutils.md5sums
flex.md5sums
gawk.md5sums
bc.md5sums
libpng2.md5sums
base-files.md5sums
dc.md5sums
xvier.md5sums
bzip2.md5sums
cpio.md5sums
liblockfile1.md5sums
rcs.md5sums
libreadline4.md5sums
libreadline4-dev.md5sums
libgsm1.md5sums
pal.md5sums
dpkg.md5sums
make.md5sums
lynx.md5sums
dpkg-dev.md5sums
figlet.md5sums
dselect.md5sums
console-data.md5sums
db4.2-util.md5sums
gnupg.md5sums
syslinux.md5sums
iproute.md5sums
emacsen-common.md5sums
libbz2-1.0.md5sums
libaudio-dev.md5sums
libaudio2.md5sums
modutils.md5sums
libdb4.2.md5sums
libdb4.2-dev.md5sums
lintian.md5sums
sysv-rc.md5sums
wterm.md5sums
xblast-tnt-images.md5sums
xblast-tnt-levels.md5sums
xblast-tnt-models.md5sums
kernel-image-2.6.9-2-k7.md5sums
debmirror.md5sums
rsync.md5sums
maelstrom.md5sums
mime-support.md5sums
module-init-tools.md5sums
xblast-tnt.md5sums

--n8g4imXOkfNTN/H1--

--dc+cDN39EJAMEtIO
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
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=JOlM
-----END PGP SIGNATURE-----

--dc+cDN39EJAMEtIO--

---------------------------------------
Received: (at 303270-done) by bugs.debian.org; 5 Apr 2005 18:31:17 +0000
>From scott@netsplit.com Tue Apr 05 11:31:17 2005
Return-path: <scott@netsplit.com>
Received: from populous.netsplit.com (mailgate.netsplit.com) [62.49.129.34] (qmailr)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DIspR-0003IM-00; Tue, 05 Apr 2005 11:31:15 -0700
Received: (qmail 22916 invoked from network); 5 Apr 2005 18:30:58 -0000
Received: from unknown (HELO descent.netsplit.com) (scott@62.49.129.40)
  by populous.netsplit.com with SMTP; 5 Apr 2005 18:30:58 -0000
Subject: Re: Bug#303270: false permissions of /var/lib/dpkg/info/*.md5sums
From: Scott James Remnant <scott@netsplit.com>
To: 303270-done@bugs.debian.org, Michael Gebetsroither <michael.geb@gmx.at>
In-Reply-To: <[🔎] 20050405174608.GA15224@god>
References: <[🔎] 20050405174608.GA15224@god>
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-Ce8kP1rtgoZvFewEz8T2"
Date: Tue, 05 Apr 2005 19:30:57 +0100
Message-Id: <1112725857.8570.20.camel@descent.netsplit.com>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.1.1 
Delivered-To: 303270-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--=-Ce8kP1rtgoZvFewEz8T2
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2005-04-05 at 19:46 +0200, Michael Gebetsroither wrote:

> if a package does not have a md5sums file, this file gets created in
> my debian system, but with false permissions 640 (reportbug, wont work
> for non-root users).
>=20
(ignoring the fact your bug report is wrong) ... dpkg doesn't create or
even know about md5sums files

Scott
--=20
Have you ever, ever felt like this?
Had strange things happen?  Are you going round the twist?

--=-Ce8kP1rtgoZvFewEz8T2
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBCUtlgIexP3IStZ2wRAoUGAJ9YKX5i5+6m/8WuyIS7ni1kIy07AQCdF8Gh
wWf/7dXtdULyv7Z/qXUU7Ug=
=jCiH
-----END PGP SIGNATURE-----

--=-Ce8kP1rtgoZvFewEz8T2--



Reply to: