Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"

To: Raphael Hertzog <hertzog@debian.org>
Cc: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, 889066@bugs.debian.org
Subject: Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
From: Chris Lamb <lamby@debian.org>
Date: Fri, 02 Feb 2018 15:33:51 +0530
Message-id: <[🔎] 1517565831.473119.1257014048.1DA42FF9@webmail.messagingengine.com>
Reply-to: Chris Lamb <lamby@debian.org>, 889066@bugs.debian.org
In-reply-to: <[🔎] 20180202095313.GA8554@home.ouaza.com>
References: <[🔎] 151750449879.13185.17115501883239053176.reportbug@alice.fifthhorseman.net> <[🔎] 20180202090222.GA8080@home.ouaza.com> <[🔎] 1517563278.3893030.1256977720.7341EA5D@webmail.messagingengine.com> <[🔎] 20180202095313.GA8554@home.ouaza.com> <[🔎] 151750449879.13185.17115501883239053176.reportbug@alice.fifthhorseman.net>

Hi Raphael,

> Consensus? Has there been a broader discussion on this topic that I
> missed?

Chatter on #debian-devel mostly.

> You could have a checklist

I follow a checklist internally but, as I implied in my previous mail,
using this particular tag is a poor example/representation. :)

A quick grep of "git log -p checks/*.desc" for "+ Please" will show
that tags I add invariably some kind of actionable advice. :)

> Sorry, what CVE are you referring to?

This is via https://bugs.debian.org/889060#5.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Reply to:

References:
- Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
  - From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
- Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
  - From: Raphael Hertzog <hertzog@debian.org>
- Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
  - From: Chris Lamb <lamby@debian.org>
- Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
  - From: Raphael Hertzog <hertzog@debian.org>

Prev by Date: Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
Next by Date: Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
Previous by thread: Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
Next by thread: Bug#889066: lintian should warn if the maintainer scripts include "chown -R" or "chmod -R"
Index(es):
- Date
- Thread