[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#286379: Lintian insecure removal bug (#286379)



Jeroen van Wolffelaar <jeroen@wolffelaar.nl> writes:

> No reply to this in nearly 2 years. My opinion didn't change, IMHO it is
> user-requested behaviour to get things writable by group is you set
> umask to 02 -- that's what umask *does*.

> If anybody disagrees, you can do either of these three:
> 1) convince the security team to rule that this is indeed a security bug
> and behaviour must be changed
> 2) convince lintian maintainers likewise. Nobody so far disagreed
> here in this buglog or tended to this bugreport, so I assume the team
> agrees with me here: you'd most likely need new argumentation for that
> 3) Appeal to tech-ctte if the above fails

> Otherwise, I'll close this bugreport by the end of the year.

I was about to just close it, so I completely agree with this evaluation.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>



Reply to: